So... if the attacker would not have had deactivated SSH by accident they would not have noticed?