set up ssh tunnel even if apparently noninteractive