On affected platforms, restricted users could use SSH port forwarding to access host-internal services