Right. But you could create new users, not root but with admin rights, and enroll new keys.