RDP Into a Proxmox VM Without Opening It Up to the Network

I run an Ubuntu Desktop VM on my Proxmox server and wanted to RDP into it without exposing port 3389...