condensed this as much as I could.  still needed a second conditional before doing the add because if there are zero ssh keys present, the value will not exist in the LDAP entry