patch -p1 -> p2 for ssh_harden