english, we haz it
extract key *before* calling add_user
validate keyfile with subprocess.check_call()

calls ssh-keygen -lf <keyfile>
key validation: done
Merge branch 'feature/key-validation' into develop