Depending on what platform you want to run a custom ssh server on, you may need a
newer openssh build.

Some of the scripts and configs refer to our pam_simpaccess stuff for restricting 
who can log into machines, mostly the tardis setup bypasses that while still not 
letting end-users log into the machine itself.

Our pam_simpaccess code could be released but it has assumptions about the network 
setup - e.g it assumes the use of YP with various non-standard maps that we added.

If places don't mind end users ssh'ing into the server itself (ie getting a shell) 
none of the above is relevant.