a secure jumpbox running sshd as a non-root user with key-based authentication.