add role ssh-keepalive, which uses keepalive packets to prevent firewalls closing inactive ssh connections