shadd: automagically determine which SSH keys need adding and invoke