use only RSA2 host key