OpenSSH's Match declarations are applied first-match-wins. However, we
can't safely define two Matches that might overlap unless we first sort
the keys, as Python (and Jinja) dicts don't guarantee the order of
dict keys,

We also won't scramble the match sequence every time the user adds,
removes or renames a match, and so we give the user clearer, more
concise diffs as when they apply changes.

Finally, we leave a comment on the Match line identifying where the
Match rule came from, to assist in troubleshooting.

The fix introduced in 678cc9066c
suppresses the PrintLastLog directive for FreeBSD 10.3.
SSH on FreeBSD 11.0 also does not support PrintLastLog, so this
change suppresses it for any version >= 10.3.

in order to prevent unnecessary changes due to
random ordering of dig results.

Now ssh_config also accepts string-or-list options, for serveral
keywords.

Added a macro to handle multivalue options entered in either string
format or list format (with auto joiner).

Upstream opensshd does not support PAM

Signed-off-by: Johannes Löthberg <johannes@kyriasis.com>

Allow user to specify aliased path (with %u)

Added Jinja logic to allow the option to pull the moduli from an online source.

This set of options reflect the ssh_config options that are set by
default on Debian. The way this was set before has the potential to
break exisisting setups that rely on "normal" defaults, rather than the
rather opinionated ones that are now being shipped with this formula.

put the ssh_config Host:* options in the defaults file so they can be overridden

This gives us the ability to define system-wide definitions for specific Hosts, and their options.

For example, with this in pillar:

```
# this is the place for host-wide SSH config
ssh_config:
  ...
  Hosts:
    # this simplifies cloning with custom params
    # eg: git clone my-git:foo/bar
    my-git:
      User: git
      HostName: git.example.com
      Port: 2222
```

This would add a section in `/etc/ssh/ssh_config`:

```
Host my-git
    User git
    HostName git.example.com
    Port 2222
```

Signed-off-by: POTIER Mathieu <mathieu.potier@onzeway.eu>

Signed-off-by: POTIER Mathieu <mathieu.potier@onzeway.eu>

Made a small change to reflect the default sshd_config

Signed-off-by: René Jochum <rene@jochums.at>

Signed-off-by: René Jochum <rene@jochums.at>