simplify by allowing some params to be preset in rules
# WARNING: when these hooks run they will entirely destroy and rewrite# ~/.ssh/authorized_keys[hooks]changegroup.aaaaa_update = hg update -C default > /dev/nullchangegroup.refreshauth = ../../admin/hg-admin-tools/refresh-auth ./hg-ssh-wrapper