Got up from my desk to go to the washroom. Turns out the area of the floor where I sit has been blocked off with yellow "Caution - Do Not Enter" tape. A lesser employee might have worried at that point, but I realized: no problem! I'm not even trying to enter!
ssh+2FA to all your machines, anywhere, without opening firewall ports.