Peter Avalos wrote a note that better summarized my earlier post, and mentioned a problem/workaround with ssh and non-md5 MACs.