That really depends on the use case. We too have sshd listening on a non-standard port and the overhead to tell people what to put into their .ssh/config is neg

That really depends on the use case. We too have sshd listening on a non-standard port and the overhead to tell people what to put into their .ssh/config is negligible. We use SPA only on very few select servers that less people need to access and those just get the shell script they need to run instead of typing "ssh $host". After about 2 years of running things this way: The time saved in checking system logs in a single week was much more than the time spent on "training" people in those 2 years.