Managing host keys is much more than just dumping at some point in time all
the certificates in some directory, even if under version control. Servers are
(can be) deployed and ramped down and reinstalled and moved from network to
network all the time, and not always by you nor by somebody who cares about
your configuration management system, which leads to plenty of fun in tracking
what keys the servers have and should have.