We use the Keybase SSH CA. It's secure, removes the need for individual ssh keys, a d moves things over to chatops.

https://keybase.io/blog/keybase-ssh-ca