This is worth either making a documentation note over, or otherwise pointing out that the functionality is currently disabled, so users aren't surprised when host key verification magically succeeds.