Jumpbox vs bastion, The reference architecture is secure by design