nixos/ssh: don't accept ssh-dss keys

These have been deprecated long enough.  I think this default was even
made non-functional by 2337c752.  But
it's still a scary thing to see there.

Fixes https://github.com/NixOS/nixpkgs/issues/33381.