In ansible.cfg, is a default of "host_key_checking = no" and "record_host_keys = no" a good idea? Shouldn't one ship things as secure by default and let the user disable host keys?