How to Harden SSH with Identities and Certificates