Stop MitM on the first SSH connection, on any VPS or cloud provider 2 months agoprovision the hosts with an SSH CA, use the CA as a trust root in openssh. they are various version out there from the big players. 0ThreadHN