Alternatively, sidestep open(2) by implementing a SSH agent so that you can do creative things like https://krypt.co https://krypt.co does, so the key is not la

Alternatively, sidestep open(2) by implementing a SSH agent so that you can do creative things like https://krypt.co https://krypt.co does, so the key is not laying right on your main filesystem in the first place (and possibly not even ever on the workstation).