full option handling in sshd_config with parameter validation