fix unintuitive ssh stanza ordering