restrict ssh to static-master-ubc-01 by default. we really really should move this...