mention sshkeys, add 'how this works' section to readme