@mathie @mperham depends if you can use a vault, then you could have even less ssh keys. 1 per host under control & release