[closeparen]

You do not need to put keys on the web sever’s disk to SSH onward from it. Use agent forwarding instead.

[egwynn]

Or even use `ProxyJump`, which doesn’t put as much trust on the jump host!

[gehaxelt]

Good points!

I've updated the post.

Thanks!