SSH Keys: Security Asset or Liability?