DB connections can use SSH tunnels