fix Match ordering in sshd config as it needs to be the last part