ssh and rsync need explicit identity file