I wonder if you have any plans for u2f two factor authentication (or even TOTP)? For people that are in the process of learning HTML, u2f seems like the only secure option because the mental overhead needed to grok ssh usually is too big.