task-0019-user-ssh-keys-and-access-policy
main
Per-machine client identities, so a compromised machine surrenders only its own key, plus a role-based rule for which machines may reach which. Only neogaia exists, so the server half is recorded rather than exercised.