The --authorized-keys-file option now matches the syntax and semantics
of sshd AuthorizedKeysFile directive, token substitution and all.