In my head, or use .ssh/authorized_keys