I think it's useful to still load this from hiera as it's data that might change. You can add it as a class param:
```puppet
class base::user (
  $ssh_key
) {
…
    ssh_key => $ssh_key,
```