I would like to provide friends with a self-contained SFTP remote configuration to be used with Rclone's built-in SSH client. As far as I understand, I have to specify a known_hosts_file to enable host key validation. As of Rclone v1.69.1 this requires a separate file. I would rather like to inline the known hosts in the Rclone configuration, similar to the key_pem option. Of course, inline known hosts would be read-only.
Is there any reason not to do this?
Is there any other way to protect against man-in-the-middle attacks? AFAIK Rclone doesn't implement it's own TOFU known hosts.