I like it, because you have to resort to having physical access to the machine to restore any amount of access.

If you have one account, where you replaced the ssh password with a script that issued a challenge token you have to digitally sign with a Bitcoin key and no root account, I think you can effectively bar remote access otherwise.

Reply to this note

Please Login to reply.

Discussion

That is, Bitcoin's signature standard has a whole industry focused on securing private keys. So it would be technically better than a password or preshared key. Even though those would effectively do the same thing.