> Don't modify the init script, use the config file /etc/sshd_conf. That won't
> be overwritten by updates, the new file comes in as sshd_conf.rpmnew.

that's common to any/all instances of sshd.  it would be nice a single
instance of sshd could listen on 2 ports with distinct configurations
for each, but i'm not aware that it can.  implementing a second
instance as /etc/init/sshd1.conf, with respawn, seems to work.