How do you manage SSH keys?

A community discussion on SSH key management practices, covering approaches like one key per device vs. per host, storage in Secure Enclave via Secretive or password managers like 1Password and Bitwarden, and using Yubikeys as SSH certificate authorities. Contributors also discuss threat models, privacy considerations with IdentitiesOnly in ssh config, and the tradeoffs of hardware-bound keys.