or ideally I can start some tunnels after pulumi provisioned the bastion instances