[angry_octet]

Not a help for the VPN part, but I have to 2FA for SSH, with an app or YubiKey, and that would be tedious to set up with multiple shells. With a control channel it's instant login for subsequent shells, sshfs mounts, etc.

[tjoff]

Sure, but that is not a problem listed in the post.