setterm: terminal [...] does not support --blength
[sshr] share the session
[ssh] tweak configs

don't hash known_hosts - it's more trouble than it's worth
let upstream decide the best MACs
"PreferredAuthentications publickey" means it won't even try any of the others ever
remove commented defaults
update logrotate settings
[sshr] exec - one less process hanging around
more swappiness
more paranoid sysd units

hopefully they won't break anything, i may regret this