4ae16cafe7
Plain ssh-keyscan prints nothing on a per-host failure (by design, so scanning long host lists doesn't spam errors for hosts that are down), which is why removing 2>/dev/null earlier revealed nothing. -v forces it to actually report what's failing.