Hypervisors don't have passwordless key trust between them, so the
export/import stream's SSH hop from source to target now authenticates
via sshpass using the target ComputeMember's own stored ssh_password
(the same credential this app already uses to reach it directly),
auto-installing sshpass on the source host if missing. The plaintext
password never gets logged or persisted to migration options - only a
redacted form does.