@liw@toot.liw.fi here it's another one (this one also talks about roles and principals):

https://www.paepper.com/blog/posts/how-to-properly-manage-ssh-keys-for-server-access/