This flag can be more descriptive. What about `no-host-key-verification`?