add option to limit (or disable) ssh access to hardware node