[tptacek]

Centralized single points of control are a basic goal of corpsec. They trade availability for security. The alternative model of individual SSH keys is theoretically more highly available, but has many single points of security failure.

[jas-]

Please enlighten me on the ‘many single points of security failure.’