> My main concern as a sysadmin in a company is user training and telling folks to use the non-standard ports.

Could you ship and manage SSH config files for your users?