drop explicit port 22 openings since 0.0.0.0/0 is now allowed