CERT NZ documentation for hardening SSH server and client configuration, and using hardware tokens to protect private keys