That user can then log into the site and add his SSH public keys they want to be identified by (like how Github manages it). I would then have an agent process I can install on servers that identifies ...