Using negative flags is a common thing to do. It means we can change the default behavior but give the user a deterministic way to control it. Using a pair of `--verify-host-keys` and a `--no-verify-host-keys` boolean flags is the best thing to do here.