I even run RDP through SSH tunnels. No key no access, plus they have to know the user name login and root has been completely disabled..