You can do this with policy (or a custom SSH client) but it's really a mistake to treat it as the same situation unless your users are in the habit of sharing their private SSH key files around.

In most situations, getting access to the key file requires a local client compromise - at which point the attacker could simply install a keylogger.