Comment by trishankdatadog

Reupping my comment [1] from the last discussion:

> Agreed: adding port-knocking and fail2ban in addition to passwordless should not be and are not silly ideas.

[1] https://news.ycombinator.com/item?id=24446577