In "real life" you can setup SSH to fall back to other methods. See the howtos for setting up 2-Factor Auth[1] for example.
[1] https://www.digitalocean.com/community/tutorials/how-to-set-...