Adapt tests, now that DSA if off by default; use PubkeyAcceptedKeyTypes and PubkeyAcceptedKeyTypes to test DSA. Upstream-Regress-ID: 0ff2a3ff5ac1ce5f92321d27aa07b98656efcc5c
use ${SSH} for -Q instead of installed ssh
reorder logic for better portability; patch from Roumen Petrov
regression test for host key rotation