make .ssh and authorized_keys slightly less restrictive