ssh auth: no freecandy, add pa-chicks