Enable ssh fingerprint verification by default
    
    Because full local validation is provided, enable ssh validation over
    DNSSEC. It should would out-of-the-box for any installation, where
    systemd-resolved is installed.
    
    Signed-off-by: Petr Menšík <pemensik@redhat.com>