refactor(ssh): improve known hosts handling to better match spec