store port in provider's known_hosts to prevent modification of ~/.ssh/known_hosts.
minor: util::bail
don't assume ssh keys will be RSA.