envoy: allow scp to be wrapped like ssh