add a post-bootstrap provisioning script to set the ssh login permissions