services.cf: adjust sshd pattern to exclude children on SuSE and Debian/Ubuntu