restrict ssh to static-master-grnet-01 by default. we really should move this config...