Based on RedHat 7 with few modifications (ed25519 hostkey for F22, GSSAPICleanupCredentials defaults to no, s/LC_TYPE/LC_CTYPE/ in AcceptEnv). Tested on Fedora 20 & 22.