Make Paramiko stricter about unknown hosts

Warn by default, rather than silently accept known hosts.