Tor has special domain names called ".onion addresses". They can only be
resolved by using a proxy via tor. While the rest of the openssh suite
fully supports proxying. ssh-keyscan does not, so it can't be used for
.onion addresses because it just barfs saying unknown host