Add SSH PEP

geard has such a custom setuid executable (switchns) that joins the namespaces to run the commands.