SSH seems one of the few really trusted processes. It is even allowed for the public zone. Allow it in "nm-shared" zone too.