ReadOnlyConfig: use a set to store allowed SSH commands

This removes duplicates in case the same command is configured multiple
times in the multi-valued option readonly.allowSshCommand in
readonly.config.
Change-Id: I87d780c8640287cfb62a1611cbbbb672514b04be