refactors around lxc ssh credentials