reorganize SSH key management

- read the SSH keys only from /etc and not from users home for better
  auditability. This also makes generating the key lists much easier.
- move deployment of root ssh keys to the ssh role
- improve deployment of user ssh keys in the user role