Automate SSH tunnels #49
Description
To connect to a remote KES agent (whether as a control client or as a service client), the relevant domain sockets need to be forwarded over SSH.
For reliable unattended operation, it is necessary to automate the process of setting up those tunnels, monitor them, and re-establish them as needed.
This should not happen from within kes-agent, but in the interest of making it maximally easy to deploy and provision KES agent setups, we should provide some kind of ready-to-use tooling to cover this.