a sheepdog for ssh privileges