Add support for ECDSA host keys

Seemed like a good opportunity to refactor the key provisioning into a loop.