You can do THAT with an APM policy?

When we managed DevCentral servers ourselves back in the day, we were in a vmware hosted environment. We provisioned APM for traditional SSLVPN access to manage the web, database, file, mgmt, and directory servers, but since everything was fairly flat from a network perspective, we decided against the traditional benefits of a jumpbox for managing the BIG-IPs and used a policy forwarding trick combined with an iRule to gain access to the GUI/CLI/API endpoints directly from our team laptops. Not as cool as KeesvandenBos use case but it simplified things a lot for us.