add git ssh host keys explicitly, and then fetch dotfiles via ssh instead of https. also set up git via dotfiles