This setup should be easier than it currently is. Any bastion host that’s used for more than jumping is asking for trouble.