* The services are using ExecPre to start sshd-pre script * The sshd-pre script substitutes token in standard configuration file and writes a new on in /run * The services are using a file in /run as a sshd_config