it's not properly documented, but based on Net/SSH2.pm source, it requires Net/SSH2/Constants.pm, which sets up export tags, including :policy which includes LIBSSH2_HOSTKEY_POLICY_TOFU -- so I think that use Net::SSH2 qw/:policy/; should work for you (untested).