added hostfingerprints to squash mercurial warnings