Your "SSH cert" option, in a consumer package, is effectively the passkey.