Harden SSH, encryption key check, team 2FA and version log

Sets SSH MaxAuthTries to 4, runs the encryption key check that never ran, and records changes to access-related doctypes in the version log.