use ssh variable substitution