add some minimal checks to import_key that the default hostname is legitimate.