Give a nod, not your keys.

No readable secrets. No standing SSH access.
Everything needs your nod, on your iPhone or Mac.