For work machines, use non-SSH rmate. For remote machines, forward the port.