Allow ssh from ci-new

this is to allow backup of transition logs.