prefer publickey to gssapi-with-mic for authentication