If all the servers you talk to are up to date enough to accept SK keys, I would use one:

https://www.yubico.com/blog/github-now-supports-ssh-security...