people overuse shared keys This is not a drawback of key-based authentication versus passwords because you have the exact same problem with passwords. If you w

people overuse shared keys This is not a drawback of key-based authentication versus passwords because you have the exact same problem with passwords. If you want to explain proper key-management then explain it. But don't make it sound as if key-auth was some esoteric option that should be carefully considered versus password auth. Key auth should always be the default and password auth should always be disabled, exceptions to this rule are very rare.