This is complicated by the fact that this should happen automatically without modifying the users' config. One option could be to set GIT_SSH_COMMAND. Or perhaps one could edit the PATH environment variable to inject a wrapper. The goal is to pass -F to define a custom config file like above.
Should also explore whether to place this in auto(import|export), l10n-bot or a new wrapper.