On a side note... We&#x27;ve largely solved the &quot;key distribution&quot; problem by storing public SSH keys in LDAP. OpenSSH 6.6+ (I think) has a AuthorizedKeysCommand that can execute a script. We have a script that does an LDAP search to pull the public keys for the incoming user.