Currently, if the script is prompted to accept a fingerprint (here), the script blindly accepts it and takes no additional action. It should run ssh-keygen -l -f /etc/ssh/ssh_host_rsa_key and compare it against the initial fingerprint, then if it matches, continue, if it doesn't, abort and alert the user.