back to stricter ssh url validation