explain the chicken-egg-situation of the SSH fingerprint