Match roles against host groups, tweak ssh server.#105