switch to keys scoped to accounts rather than regions. show exceptions when generating ssh config file.