Leave iptables on and port forward with SSH to localhost. Same thing people do with elasticsearch or other non-authenticated services.

These are early stage projects. The ones that stick around will get more enterprise-y over time.