ansible pushes authorized_keys to all the boxes -- there&#x27;s a different keys file for different &quot;clusters&quot; -- dev&#x2F;prod&#x2F;staging.  Most of the users&#x27;s keys are the same between these files, but it gives you the ability to have users who have access to dev&#x2F;staging but not prod pretty easily.  All of this config lives in the main git repo.<p>Even if your initial solution is just to copy an authorized_keys file to each box, check that into git.  You can just have a small shell script checked in as well that copies the relevant file to the relevant boxes...<p>Also, always have a backdoor account that uses a key you have and isn&#x27;t updated this way so if someone biffs the key file you push, you don&#x27;t lock yourself out.