This is the "vpn" option. It's a valid option. I don't think tightly coupling ssl is always a good idea - I just don't think it's a bad idea as an option/feature.

I don't use haproxy to secure my telnet sessions - I use ssh.