SSH seems to provide everything that we're looking for in a transport - pluggable authentication, transport layer security, multiple independent streams. We should investigate using SSH for this purpose rather than reinventing a similar protocol.

The best solution would be to provide a generalized SSH server that deploys into the MC, into which services (such as JRPP) can then be deployed.