Implement new credential types holding SSH keys
Created by: eseliger
This is the first part of SSH credentials support: Adding the new authenticator kinds.
These are also supported where we used the non-WithSSH
versions, and we create them by default now when a user adds a new token.
Existing ones in the database are migrated using the new out-of-band migration system by @efritz.