include a more secure default ssh config