More importantly, it is far easier to revoke on a person-to-person basis even on the same account. If you use password auth and some accounts have a password t

More importantly, it is far easier to revoke on a person-to-person basis even on the same account. If you use password auth and some accounts have a password that is shared knowledge (root, anyone?), you have to change all passwords once one persons permissions change. In practice, revoking public keys is a problem for many companies already as I found out when my private key was stolen a while ago. (on an encrypted drive, but paranoia is paranoia)