Configure macOS for smart card-only authentication - Apple Support

support.apple.com

saved by: 0 people
related read on: The default OpenSSH key encryption is worse than plaintext from the discussion