exec ssh in wrapper rather than just running it
fix encryption key for real this time