Use host's SSH keys, build in a data container, and expunge more env vars