Avery's rules of testing:
1. If you didn't test it, it doesn't work. Ever.
2. Thus, every time you write a new test, if your test is any good at all, you will discover something new that didn't work.
3. You will always be surprised when this happens. Even if you name the rules after yourself.
ssh+2FA to all your machines, anywhere, without opening firewall ports.