dejima documents /etc/nginx for remote access on the devbox, so a change there is common and now reads as its own area rather than as /etc. The known_hosts note said it changes only on a first connection. ssh's UpdateHostKeys also adds keys a known host offers, keeping known_hosts.old.