builder/*: extract key path to ssh.Signer
common/ssh: error if encrypted key is used