binary when we only have the vendor's RCSID.
sync w/ openbsd
- ssh is no longer seruid root. ssh-keyscan is added to read secret host keys. protocol version 1 rsh-like authentication is gone. - FallBackToRsh is deprecated.