don't copy public keys into authorized_keys by default