set packages over ssh instead of https