- construct VPC for cluster
- at least make security group policy not be CIDR dependent
- nicer SSH interface
- shellwords
- async I/O instead of rayon (not compute heavy)
- use https://docs.rs/thrussh/
- allow arbitrary provider and region
- configurable connection timeout
- gathering statistics/results