use install -d to avoid MITM

• allow repeated adds to known_hosts
• use install -d to avoid MITM

Altho the MITM is pretty rare in this scenario, it's best to promote good practices.