Hi -

> [...]
> Is there a way to get ssh to tell us if the key looks right?  That's
> probably the best way to verify keys. [...]

Or an even tougher-love approach would be to force new account holders
to log in using the putative key within some time limit after initial
account activation, to prove they hold a matching private key.

- FChE