`-k` doesn't work well, as a separate SSH run is still needed for `known_keys`
-kdoesn't work well, as a separate SSH run is still needed forknown_keys