The nagios ssh check only checks for the banner response.
If anything after that is going to prevent you from logging in, nagios won’t tell you. It can’t do key negotiation, and it certainly won’t go as far as getting a shell. If there’s a delay on the server causing the authentication to take longer than a TCP timeout, then check_ssh will pass and you won’t know until you have angry users.