split out ssh.sh, chown -rwx on private keys
minor: keyring service names