* push actually takes an optional suite, like it says in the synopsis.
* Command execution reports from --dry-run go to stderr.
* Support --gpg=... to provide a replacement command for gpg.
+ * Support --ssh=... and --ssh:... to affect how we run ssh.
--