[brandon]

Google's model allows SSH to "internal machines" over a set of relays that apply the same machine authentication and trust tier logic that's laid out in the papers.

So your workflow would still be supported, and it would likely be more secure than exposing SSH traffic to the internet at large.