Add SSH PEP

This seems to be the nicest story for distributing the component (similar to the registry as a "system pod"), if we can deal with the security concerns (which seem to also exist for builds which also use priv'd containers).