OP describes tunneling SSH within another protocol. In the absence of DPI, this wouldn't be required.