You could also include SSH keys as public secrets.

https://github.com/Foxboron/ssh-tpm-agent