Fixed options order

"VerifyHostKeyDNS yes" was only being applied to connections to squirtle. Global config must be at the top, followed by host specific configs.