I think `authorized_keys` should be included as a blank file, and agree with a note about populating it.