> sshd can be happy with either a key or a password.  and, ssh keys can
> be generated to require a passphrase.
>
> but can sshd know if the key required a passphrase?  if not, i want
> sshd to require a password in addition to a key.  anyone done this?
> or seen how?

i've seen mention of a pam approach, but no detail yet..