provision/docker: don't detach sshd