You could also always add port knocking or something like that.
If you're going to that level, just put it behind a VPN.
If you're going to that level, just put it behind a VPN.