Use a new set of SSH host keys each run
Move ENV var check before host key generation
Store host keys on different volume for container portability
Restore SFTP users on restart