Nice idea ... I'll have a play with this.  The one downside is that we don't want instances opting out of the chaos monkey simply by blocking SSH :-)  Maybe I'l just log with relatively high severity if the SSH key is configured but we can't log in via SSH.