cmc -F /dev/null so ~/.ssh/config cannot add the user's own key; StrictHostKeyChecking accept-new for a service that cannot prompt.