code: func (c *SessionContext) newRemoteClient(cluster reversetunnel.RemoteSite) (auth.ClientI, net.Conn, error) {
  	clt, err := c.tryRemoteTLSClient(cluster)
  	if err != nil {
  		return nil, nil, trace.Wrap(err)
  	}
  	return clt, nil, nil
  }
docs: // newRemoteClient returns a client to a remote cluster with the role of
  // the logged in user.