Remove ssh from spoke by default

the only reason I left this in, but disabled by default, was for obscure
cases of debugging. With `docker exec`, even this is no longer a need.
Production containers shouldn't have ssh anyway, and now not even
testing/hacking those containers need it.