SSH: duo integration

This is mostly copied from puppet-config/common