ssh improvements

This PR is to add new parameters to `sys::ssh` for managing authorized keys commands and enabling SSH certificate-based authentication.  In addition, general cleanup is performed on the `sshd_config.erb` template (e.g., using `scope[]` instead of `scope.lookupvar()`).