Chris Boucher spotted that after "-nc" was added (r6823), cfg->ssh_nc_host