Until now, Mercurial only supported tunnelling over an ssh connection when pushing changes to a remote repository. Matt just committed some changes that lets all commands that talk to other repositories work over ssh tunnels.