Refactor authorized_keys support to match SSH functionality

See merge request !1

The --authorized-keys-file option now matches the syntax and semantics
of sshd AuthorizedKeysFile directive, token substitution and all.