@mjg59 when decompressing something that looks like a sshd, drop a payload in /lib/x86_64-linux-gnu/glibc-hwcaps/x86-64-v2/libcrypt.so.1