use ssh rsa hostkey instead of ecdsa, cause ssh-keyscan (still) uses rsa as default