do not hardcode dns primary ssh key for syncing to secondaries