docs: clarified how authorized_keys is generated