samhain ignore /etc/ssh/userkeys since we now ship a file under it. Sigh