Simplify getting use-ssh-substituter from untrusted users