looking on google, this seems to come up a lot.
have users. each user has N ssh keys. sometimes, one of the users keys is revoked. for example, a crashed cellphone sent in for repair.
we keep keys like this
`
.
├── voxel
│ └── voxel.pub
├── pixel
│ ├── pixelphone3.pub
│ ├── pixel.pub
│ └── revoked
│ └── pixelphone2.pub
└── root
├── voxel.pub
└── pixel.pub
`
with a single user, this works
`