[tptacek]

A VPN is also a fine answer. I'm marginally more worried about the code quality of something like openvpn than I am about openssh at this point, but six of one.

I think the "clandestine entry point" stuff is mostly a psychological benefit.

[wglb]

And it reduces junk in the log.