74331ac301
Diagnostics is best-effort. Using accept-new without UserKnownHostsFile caused the system known_hosts (~/.ssh/known_hosts) to be consulted, which holds a stale key from a previous clone of the same IP. Switch to no+NUL (same as Wait-VMReady) to avoid false host-key errors.