binary when we only have the vendor's RCSID.
- ssh is no longer seruid root. ssh-keyscan is added to read secret host keys. protocol version 1 rsh-like authentication is gone. - FallBackToRsh is deprecated.