the “-O” is required now, due to changes in the default behaviour from the ssh tool.
updating ssh breaks support for the Duo (some weird security thing they have not bother too much to deal with on some ARMv7 32bit platforms), and this is not a critical thing (yet!) while it still works.
just a minor annoyance for now.