that's how I do it. I make you email me a public key before I set you up, then I use that public key to control access to your serial console. Right now my bi

that's how I do it. I make you email me a public key before I set you up, then I use that public key to control access to your serial console. Right now my big problem is that the channel for the public key is email, which is no good. On larger deployments I've always put the ssh pubkeys for authorized users in a package that is installed when the server is installed.