For a single person that a pretty good solution just make sure you backup you SSH key so you can recover if you lose your yubikey. In a multi-person enterprise

For a single person that a pretty good solution just make sure you backup you SSH key so you can recover if you lose your yubikey. In a multi-person enterprise the issue becomes how to manage all these keys with on-boarding, off-boarding, logs, access policies as people's roles change. Maybe someone only needs access for a day? How do you ensure their key is removed tomorrow morning. Maybe someone never setup their yubikey and their SSH key is just living on their laptop and backed up to dropbox. SSH is a great solution for individuals but I've encountered so many anti-patterns when used among large teams.