configure all non-customer-facing sshs to use a high port

This is to avoid the brunt of ssh brute forcing attacks.