[ssh] VerifyHostKeyDNS by default