SSH key persistence

malware or threat actors may add their own public keys to .authorized_keys files as a form of persistence.

---