Sorry, I missed a file when committing. I had a `.gitignore` inside `.ssh` with contents `*`. Your solution works too. And you don't have to run fab from the checkout, but the intention is indeed that the known_hosts files are kept in a directory in the repository.