Summary
WithConnectTimeout, WithHostKeyChecking, and WithKnownHostsFile use a type assertion m.dialer.(*XCryptoDialer) and silently do nothing if it fails. Security-critical settings like WithHostKeyChecking(HostKeyStrict) are silently dropped with no warning when a custom dialer is provided.
Location
ssh/ssh.go:77-83, 93-99
Suggested Fix
Log a warning or return an error when the option cannot be applied to the current dialer type.