Various SSHd Configs should be parameterized

Any sshd match blocks that currently have static sshd configurations should be changed to come from a VAR parameter so that they could be overridden if necessary.

See how we are doing this for the ansible user's sshd match block as an example of how we want to adjust this.

These changes need to be applied to:

• admin access
• bastion access
• hostbased access