TODO: rotate the backup key in .ssh/ before the audit.
