@nixCraft public keys managed with an initialization Ansible role.

I've tried ssh certs, but it's more annoying to manage for my setup so far