ssh keys in ldap can be prefixed with an allowed_hosts list. ud currently ignores that and includes such keys anyway.