I know we're getting into the weeds here but for the benefit of people learning random things that work slightly differently (tm) A possible workaround for thi

I know we're getting into the weeds here but for the benefit of people learning random things that work slightly differently (tm) A possible workaround for this specific scenario would be to use 'sshutle' which runs a python script on the remote end to terminate the traffic. Except in your specific scenario you'd have to somehow trick it to execute using a login shell like one of the other comments shows. Having said all of that, I would just do what you did :)