I've hacked up a working implementation of PB over SSH (Conch) if anyone is interested. It's a convienient way to have both transport security and authentication for PB sessions. I've implemented a version in plain Twisted and one using PEAK+Twisted. The code is a little rough, but if there's any interest I can clean it up for general consumption.