This also removes the explicit passing of the public key fingerprint to the unlock script, since the host key is no longer available in pass. Unlocking still works, since the keys are configured in modules/ssh.nix.