I don't really think there's any polite way to put this: Your employers are simply assholes.
# Sample bastion host configuration without ForwardAgent
# Host bastion
# User bastion_user
# Hostname 10.11.12.13
# IdentityFile ~/.ssh/id_bastion
#
# Host server
# User server_user
# Hostname 192.168.0.1
# IdentityFile ~/.ssh/id_server
# ProxyCommand ssh -q -W %h:%p bastion