I would suggest using password-based encryption rather than anything that forces auto-generated keys or what-have-you (like an SSH private key). Can't guarantee

I would suggest using password-based encryption rather than anything that forces auto-generated keys or what-have-you (like an SSH private key). Can't guarantee you'll always remember that password, but you'll have a fighting chance. And if instead you still insist on using some gibberishy key, more than likely you'll end up using PBE to keep track of it in some sort of repo anyhow, right?