Rework the bastion-only info route guide #257

Secure the route to infrastructure: all access to infrastructure (production or otherwise) must be via a secured route, for example via a hardened bastion only accessible via a VPN (with MFA challenge), and with an audit of usage.

^^ reconsider this ^^