andrew found out today that certain of our servers require special handling for getting on the mgmt interface
example: ssh -oKexAlgorithms=diffie-hellman-group14-sha1 -oCiphers=aes256-cbc root@labvirt1005.mgmt.eqiad.wmnet
labcontrol1003.mgmt.eqiad.wmnet labcontrol1004.mgmt.eqiad.wmnet labmon1001.mgmt.eqiad.wmnet labnodepool1002.mgmt.eqiad.wmnet labpuppetmaster1001.mgmt.eqiad.wmnet labpuppetmaster1002.mgmt.eqiad.wmnet labsdb1001.mgmt.eqiad.wmnet labsdb1003.mgmt.eqiad.wmnet labsdb1009.mgmt.eqiad.wmnet labsdb1010.mgmt.eqiad.wmnet labsdb1011.mgmt.eqiad.wmnet labtestcontrol2003.mgmt.codfw.wmnet labtestmetal2001.mgmt.codfw.wmnet labtestnet2002.mgmt.codfw.wmnet labtestneutron2002.mgmt.codfw.wmnet labtestpuppetmaster2001.mgmt.codfw.wmnet labtestservices2002.mgmt.codfw.wmnet labtestservices2003.mgmt.codfw.wmnet labtestvirt2003.mgmt.codfw.wmnet labvirt1001.mgmt.eqiad.wmnet labvirt1002.mgmt.eqiad.wmnet labvirt1003.mgmt.eqiad.wmnet labvirt1004.mgmt.eqiad.wmnet labvirt1005.mgmt.eqiad.wmnet labvirt1006.mgmt.eqiad.wmnet labvirt1007.mgmt.eqiad.wmnet labvirt1008.mgmt.eqiad.wmnet labvirt1009.mgmt.eqiad.wmnet labvirt1010.mgmt.eqiad.wmnet labvirt1011.mgmt.eqiad.wmnet labvirt1012.mgmt.eqiad.wmnet labvirt1013.mgmt.eqiad.wmnet labvirt1014.mgmt.eqiad.wmnet