move ssh authorized_keys updates to their own class