Or use a hardware backed ssh key you have to tap once for every use, like a Yubikey or Nitrokey.