Also, AuthorizedKeysFile may also be set to none to skip checking for user keys in files altogether!

Or choose to disable keys based authentication if using certs.

Or customize keys so that they get served from a db or some such, the only requirement for this is to write a script or binary.

I linked to all of this in another reply and it was downvoted for some reason. Odd.