More explicit SSH rate limiting extension matching