I meant keys (sorry, under the weather at the moment), although it does appear possible to use actual certs (the CA kind), e.g. https://ef.gy/hardening-ssh Never done it myself though. J.