tm: allow ssh to be overridden