sshfp records for the access points. (and switches?) I think we have the webui disabled on all the cisco kit so don't need TLSA records.