Public keys are not enough for SSH security https://blog.cloudflare.com/public-keys-are-not-enough-for-ssh-security/