add OpenSSH DSS public key loading

fixes #1531

A few additional changes since it turns out the naming for EC keys looks like `ecdsa-sha2-nistp256` (so matching on `ssh-` is ultimately inappropriate)
I just realized we should handle the body being invalid base64 correctly -- all of them are going to be b64, so maybe move this into the caller and add some error handling?