For the SSH module it's not really necessary, but if we want to tunnel other stuff (HTTP, VNC, ...) we need secure end-to-end tunnels.