SourceAddresses and Extension configuration should be optional in the server config. At the moment, if left out, the ssh certificate is filled with un-substituded environment variable name