add option for strict ssh checking