Simple attempt to use standard key-pair if password auth fails
separate paths out into their own vars
Only try to fall back to the default pubkey if it exists
Finished instead of Done
use URLs for URLy things
to do: pubkey configuration