The security role was not properly handling ssh configuration files that
have Match stanzas. This patch ensures that all added configurations
appear before the Match stanzas in the /etc/ssh/sshd_config file.
Closes-bug: 1579914
Change-Id: Ic7575490cda2bdba880e860e2e400029a84d7d45