true, On the other hand I think a two-person SSH is probably an easier thing to build in terms of recording what was done for audit, and maybe even require bot

true, On the other hand I think a two-person SSH is probably an easier thing to build in terms of recording what was done for audit, and maybe even require both parties to confirm commands before executing them. Also your SSH server could require both parties with different keys to login before it starts or something. I think this kind of stuff would be harder to implement in a web browser (but just as useful probably)