Little known fact: only the webapp part of Pandora is IP-restricted. The media servers are open to the world. So as long as you can load the player through a tunnel, the actual mp3s can go through your normal connection.