Tools: Allow bastions to access other hosts with HBA

This sets HostbasedAuthentication and EnableSSHKeysign to yes in
/etc/ssh/ssh_config.

Change-Id: I42f9f55641d82beb0191924a0bc7657e4987d28e