stricter authorized_keys