fetcher: look for other host keys, not just RSA