add vtysh_wrapper for SSH authorized_keys

this allows a "only calls to vtysh" configuration with SSH public keys