> Often you either end up with one "dev ssh key" for all machines (which is bad)

Or, conversely: with one "dev password" for all machines.