Yeah that doesn't really cut it for remoting over the internet into a VM in the cloud. As far as securing this it's as simple as tossing a few lines into your reverse proxy config.