Currently, Kevin reaches out to all configured Falk instances (the container spawners). It would be better the other way round, i.e. Falk connecting to Kevin. One just has to reverse the possible connection transports: Unix socket and SSH-forced-command-tunnel.