This reverts commit 1a74eedd. It breaks NixOps, which expects that rm -f /etc/ssh/ssh_host_ed25519_key* systemctl restart sshd cat /etc/ssh/ssh_host_ed25519_key.pub works.