How about delivering the public keys via another trusted path: https://paul.totterman.name/posts/ssh-pki-web-pki/