{
  user ? throw "user argument is required",
  home ? throw "home argument is required",
}:
{ ... }:
{
  environment.persistence."/persist"."${home}/.ssh/known_hosts" = { };

  home-manager.users.${user} = {
    programs.ssh = {
      enable = true;
      userKnownHostsFile = "${home}/.ssh/known_hosts/default";
    };

    systemd.user.tmpfiles.rules = [ "d ${home}/.ssh/known_hosts 0755 ${user} users" ];
  };
}