fix syntax for host key verification