use an unsecure ssh key for the mha user
write the mha.cnf on the manager -- this currently needs manual modification on AWS