I'd love to see this, with the added ability to whitelist specific SSL certs like ssh does with host keys.