Clean up DSA host keys
OpenSSH 7.0 is in our repos since Aug 11, 2015 (archlinux/packaging/packages/openssh@13048c1d), therefore we can safely retire DSA keys:
OpenSSH 7.0 and greater similarly disable the ssh-dss (DSA) public key algorithm. It too is weak and we recommend against its use.