Jump host with restricted commands / access. Agents SSH into a jump host and execute what they are allowed to execute.