add OpenSSH DSS public key loading

fixes #1531

A few additional changes since it turns out the naming for EC keys looks like `ecdsa-sha2-nistp256` (so matching on `ssh-` is ultimately inappropriate)
Technically, you don't need this `else` here. It's probably a little cleaner without having the extra indent for the exception.