core136: apply local sshd config and restart sshd at update