BF: filter.d/sshd group on md5hex and () for serial needed to be escaped