Tunneling is my favorite feature. Being able to keep both unnecessary services from running (phpMyAdmin) and disabling SSH passwords make me a happy solo sysadmin. Not that I wouldn't run phpMyAdmin if I had to, but since it's just me and people I administer on my boxes, I can use the tools I want, and keep active code to a minimum.