Local Items keychain and server-based accounts?
We were encountering the same issue. Although we did not have any SSH payloads for the users, we do have Apple Mail setup for them.

After having a panic attack over the confusion wrought by this keychain change, I decided to use Profile Manager on the OD Server (ours is OSX) to configure the Apple Mail payloads (for individual users/ user-groups).

I believe it's possible to configure SSH Payloads in this manner as well. Apple seems to be relegating more and more functionality into PM akin to Group Policy on Windows.