...
Though probably the best solution is to keep SSA from doing their unnecessary three-step process.
rrsync
from Rafi Rubin
For security, rsync has a script in the src tree "rrsync" you use that in authorized_keys to restrict what rsync can do over ssh. I usually recommend single purpose keypairs for that. You can also just use a standing rsyncd.