Support host-based pubkey authentication in the client

This is a variation of the normal pubkey authentication that also includes the server's public host key in the SSH_MSG_USERAUTH_REQUEST message.

See

• https://www.openssh.com/agent-restrict.html#authverify
• https://github.com/openssh/openssh-portable/blob/807be686/PROTOCOL#L347