certainly, but you'll have to guarantee that no user has a keyfile without a password, which is harder than checking for weak passwords on your server...