...
Don't use Internet to access your miners directly.
Use some sort of API aggregation web page (https) to list status of all miners, restart them or power cycle them. Protect that page with user login and https.
Port forward your Internet connections to that page.
cgminer already has all this by default - I wrote it - but no idea if KnC enabled it or not.