- generate before running check_mk on the sshd_config - set permissions on private key - cope with empty keys