upgrade ssh - add ability to manage HashKnownHosts