first pass at an sshd container