Access to clients should be granted using the tt(ssh) protocol.

Clients must allow the monitor to connect using tt(ssh). S() connects to its
clients using ssh certificates, after the monitor's public SSH-key has been
transferred to the clients.
