Most of this code belongs in the `ssh` package. How about `ssh/known_hosts.go`? The parts that interact with the user should stay in `fleetctl`, though.