Have you considered defusing SSH from the likes of xz backdoors?
bcksp.blogspot.com