document possibility of ssh_pubkey