Add SSH key permissions for troy.
Tweaks to `keep` config, mostly to minimize false "change" hits on setup.