What's the difference between using a really good password vs. public key authentication in SSH?