added some useful output to the ssh-proxycommand for "marginal" cases

where keys are found for host but do not have full validity.  this
uses ssh-keyscan to pull the key for the host in question, check this
key against the keys against those found via gpg, and output some
useful information about the one that matches.