Railway over SSH, agents in Sandboxes, private networking in the CLI