thinking we should inspect the relevant ssh tool for the config it expects, taking everything with the sshConfig prefix also ... but for another day