That will change with v0.10 (due in the not too distant future) You will be able to ssh to the netmaker host via wireguard