Server SSH keys behind a leasegate gate: an ssh agent whose keys never leave it, every login to a server approved by a human, per process and for a limited time.