ansible/ssh: override services rather than replacing them
The openssh package evolved since we created it (DSA keys were dropped), which led to every new farm replacing their SSH keys at every boot because the DSA keys were never created.
Rather than simply updating our service to match the current upstream package, let's instead override them to run a couple more commands.