Non-strict hostkey checking for tunnel