As discussed in #744, it is OK to TOFU the SSH fingerprints for the
Application Server and the Monitor Server. This commit removes the TODO
item from the guide and resolves #744, it also adds consistency to the
ssh-copy-id and ssh examples.