Protecting SSH keys
I have a machine for a developer and I set up SSH key to allow them to access a server.  The public and private keys in .ssh are obviously visible to the person.

Is there a way to protect these keys?  If I do not want the possibility of those keys being copied over to another server, can I do anything?

The ssh-agent by default runs under the logged in user, so I probably cannot take away the user's access rights to the ~/.ssh folder.

Thanks,
Tabrez
Protecting SSH keys
===

I have a machine for a developer and I set up SSH key to allow them to access a server.  The public and private keys in .ssh are obviously visible to the person.

Is there a way to protect these keys?  If I do not want the possibility of those keys being copied over to another server, can I do anything?

The ssh-agent by default runs under the logged in user, so I probably cannot take away the user's access rights to the ~/.ssh folder.

Thanks,
Tabrez