Do Users Verify SSH Keys?