add OpenSSH DSS public key loading

fixes #1531

A few additional changes since it turns out the naming for EC keys looks like `ecdsa-sha2-nistp256` (so matching on `ssh-` is ultimately inappropriate)