> Agreed: adding port-knocking and fail2ban in addition to passwordless should not be and are not silly ideas.
[1] https://news.ycombinator.com/item?id=24446577