recent update to openssh on arch broke
how it handles pkcs11