add hardened mk-ssh-key function