move ssh configuration to separate pillar