Clarifying comments

There's an odd behaviour when we have a host key for host which applies to all ports. In this case though, we probably shouldn't allow it (Even if the user knows it matches) because
 1. using that behaviour makes no sense (why not just connect to port 22?)
 2. if we do and host != [host]:port we'll discover later that we don't have the host key anyway!