Enable encrypted ssh keys.

Not ready for merge yet, tests and changelog entry coming later.