ensure we only compare what we need to

When comparing fingerprints, the last section is host specific - but
it's irrelevant. So we chop that bit off, and ensure that the actual
algorithm and public key still match.
Merge pull request #22 from thommay/compare_less_greedily

only compare the relevant bits of the ssh key fingerprint