force some constraint on ssh key in ldap, since several packagers did not correctly put their keys today