+# Stolen from Debathena
+debian/sshd_config.invirt-orig: /var/lib/dpkg/info/openssh-server.postinst
+ perl -0pe 's/^.*<<EOF[^\n]*\n(.*\n)EOF\n.*$$/$$1/s or die;' $< > $@
+
+# Stolen from Debathena
+debian/sshd_config.invirt: debian/sshd_config.invirt-orig
+ perl -0pe '# Debathena rules (from debathena-ssh-server-config) \
+s/^#?GSSAPIAuthentication .*$/GSSAPIAuthentication yes\nGSSAPIKeyExchange yes\nGSSAPIStrictAcceptorCheck no/m or die; \
+s/^#?GSSAPICleanupCredentials .*$/GSSAPICleanupCredentials yes/m or die; \
+s/^#?ChallengeResponseAuthentication .*$/ChallengeResponseAuthentication yes/m or die; \
+## In Debathena, privilege separation is configurable. \
+s/^#?UsePrivilegeSeparation .*$/UsePrivilegeSeparation yes/m or die; \
+s/^#?PasswordAuthentication .*$/PasswordAuthentication no/m or die;' $< > $@
+