SSHd Configs should be parameterized

The sshd match block that currently has static sshd configurations should be changed to come from a VAR parameter so that they could be overridden if necessary.

See how we are doing this in ansible-role-common for the ansible user's sshd match block as an example of how we want to adjust this.