tweak cleanup Dockerfile section explaining why ssh