Blazing flast deployments for NixOS + nix-darwin.

use openssh bindings for ssh ops; add --accept-new-host-keys for onboardings master