Add upper bounds on the number of banner lines and line length before the SSH identification string, analogous to OpenSSH. Also don't buffer all the data unnecessarily.