You could require both pubkey + password:<p><a href="https:&#x2F;&#x2F;sysconfig.org.uk&#x2F;two-factor-authentication-with-ssh.html" rel="nofollow">https:&#x2F;&#x2F;sysconfig.org.uk&#x2F;two-factor-authentication-with-ssh....</a>