allow $SSH_USER to be configurable