In order to `git push` the newly-committed certificatess in the Post-Renew stage, the agent must trust the remote SSH server's host key.