If you are serious, you should limit SSH access to a bastion host with no unprivileged users.