Do Users Verify SSH Keys? (2011) [pdf]