Each time a client tries to authenticate using SSH keys, the server can exam the customer on whether or not they are in possession of your private critical. Should the client can prove that it owns the private important, a shell session is spawned or even the asked for command is executed.Deciding on a unique algorithm could possibly be a good idea