I like the "trust on first use" commenter's suggestion, akin to how typical SSH works