Improve SSH2 host key abstraction into a generic `signing key'