Perhaps default to SSH, until we ensure init is safe to use across common Docker releases and images?