Added small helper to build an SSH tunnel for the API to bypass NAT.