can Cloudflare Spectrum be used in front of a ssh bastion host that has public IP? Will the ssh key forwarding works it?