don't use /dev/stdin hack with ssh-keygen to get ssh fingerprint. just use a tmp...