"Could still be made useful in some cases perhaps as part of a larger “defense in depth” scenario" Completely spitballing here just exploring the thought: Lik

"Could still be made useful in some cases perhaps as part of a larger “defense in depth” scenario" Completely spitballing here just exploring the thought: Like using duress pam to _only_ allow logins if a duress pw or authorized_key is used? Port knocking (https://en.wikipedia.org/wiki/Port_knocking https://en.wikipedia.org/wiki/Port_knocking) comes to mind as a simile. Could that even be done?