fix Match support in sshd_config

Match rules need to be last ones to load on the config file.
Also zap extra .items() from loop to make it work.