Mwahahahaha...I can log mosh connections using iptables.
For my next tricks, can I get logwatch and/or auditd to note them?