A very useful document of how to do more secure access to VNC and may be other SSH server - http://docs.cs.byu.edu/docs/sshtunnels/3.php

Don't login as ADMIN - http://www.codinghorror.com/blog/archives/000891.html#comments