An SSH bastion validates host certificates and one jump path fails

The certificate is valid, yet authentication fails because the server exhausts attempts on unrelated agent keys first.