Use [russh](https://github.com/Eugeny/russh) connections instead of TCP streams. Only accept known public SSH keys.