Because `$privatekey->setSignatureMode()` is called in `Net_SSH2::_privatekey_login()`. Reason it's called there is because the default signature mode is PSS, which is more secure than PKCS1, but SSH2 uses PKCS1 and not PSS.