I personally dont like Session manager. :D

Site-to-site VPN are one of the option to protect when using SSH. Or the cheapest option, using bastian server