Problem with `kr add user@bastion` is that you as `user1` won't normally have access to ssh as `user2`, but "authenticating as one user but modifying another" would work of course. Maybe add a option for team-members to save their username for servers, then mass-add would be easy :)