Yikes. Didn't pay attention and ran ssh-keygen -f [..] as root on a known_hosts file that belongs to a service user.

This makes root owner of the referenced known_hosts file and also of the corresponding known_hosts.old

Then subsequently didn't notice the followup errors because I also ran a test version of the script that makes use of these files as root 🤦‍♂️