diff --git a/vars/applyConfigPolicy.groovy b/vars/applyConfigPolicy.groovy
index e879f4e..189f0f3 100644
--- a/vars/applyConfigPolicy.groovy
+++ b/vars/applyConfigPolicy.groovy
@@ -54,6 +54,8 @@ def stageKinit() {
             sh 'cp "${SUDO_PASS_FILE}" group_vars/pyrocufflink/sudo-pass'
         }
         sh 'rm -rf .fact-cache'
+        sh 'install -m u=rwx,go= -d ~/.ssh'
+        sh 'cp roles/ssh-hostkeys/files/ssh_known_hosts ~/.ssh/known_hosts'
     }
 }