hardcode missing host key policy for now
simplify XOR condition
test _build_error_chain