Remove public ssh access on master nodes, and verify no ssh access from infranodes. Envorce the use of bastion