only compare the relevant bits of the ssh key fingerprint

When comparing fingerprints, the last section is host specific - but
it's irrelevant. So we chop that bit off, and ensure that the actual
algorithm and public key still match.