Do we have any solid guidance how to do safe, anonymous, SFTP? Even with a dedicated shell, port forwarding creates open proxies (which I know can be disabled, but still).