ssh/scp: avoid making the whole ~/.ssh/ writable but
allow creating control sockets using "ControlPath ~/.ssh/%r@%h:%p"