There's some overhead with each ssh call that we might as well avoid,
and each scp invokation prints a warning ("Warning: Permanently added
[...] to the list of known hosts") that is nicer to just see once.