[lxgr]

But now you need to worry about revocation or at least key lifetimes.

[yjftsjthsd-h]

I would argue that doing both of those is still less work than maintaining authorized_keys in many places.

[morshu9001]

Yes, also idk if the other way works with Secure Enclave

[morshu9001]

oops replied to wrong comment