makefile: refactor vivian targets
This simplifies how vivian is called from make, so now there's only one single location where all of the vivian options are configured. In addition, this allows running vivian with insecure ssh always enabled. I guess later there would be an option to disable it? but I'm not sure if that would be necessary...