Verify host keys for SFTP

[zhanghai]

Currently host key verification is just completely skipped, but maybe we should still at least ensure the fingerprint doesn't change after first connection.

[FloX-Dev]

Hi, Given that this is a function that I think is absolutely necessary from a security point of view, would it be possible to have an ETA ?