BF: fixing injection for OpenSSH 6.3 -- making .* before <HOST> non-greedy
BF: disallow exploiting of non-greedy .* in previous fix by providing too long rhost -- do not impose length limits for user-provided input

since daemon might eventually change reported length and we would need to adjust anyways.  So limiting
in length does not provide additional security but allows for a possible injection vector
DOC: adding DEV Notes for for non-greedy matchin within sshd.conf
Merge pull request #426 from yarikoptic/bf/openssh6.3-regex-injection

openssh 6.3 regex injection vectors:  inject into ruser and/or exploiting pre-specified limits set for user provided data