[different_sort]

Hashicorp vault? You probably have more secrets than SSH to protect.

If you’re on AWS also consider high value add built ins like EC2 instance connect or ssm session manager so you can manage host access via IAM.