note that, other than being easier to call, this maintains the TF deployment's status of remaining a glorified wrapper of the SSH deployment.
