valgrind has caught two more uninitialised elements in the SSH