move the SSH password login check out of setup because it interfers with Vagrant and into a separate script that we'll use for auditing in a later phase