add wrapper mode which avoids all host key issues
add note about wrapper mode