An Ubuntu bastion patch window succeeds and SSH trust breaks

Routine patching is completed and later automated SSH clients reject the bastion despite no intended access control changes.