ssh: seed the installer's key from the medium it was minted with
ssh: require a key, for every account