pub fn known_hosts_path(config_dir: &Path) -> PathBuf
Filament-private known_hosts (pin store), never the user’s.