Reported by Thomas Keller, Aug 8, 2010

IDF validates uploaded SSH keys more thoroughly by letting 
ssh-keygen print a fingerprint of the key in question. This 
behaviour however is controlled by a configuration option named 
"idf_strong_key_check" which is neither documented in 
idf-conf.php-dist nor anywhere on the net.