Originally Posted by jpollard
I would recommend using the PKI options of ssh instead. No password required as it uses PKI to authenticate with. (see man ssh-agent)
That way you don't have the security problem of a password embedded in a file...
Always preferable if possible, but there are some scenarios where this isn't possible, like to network devices. Doesn't exactly look like a network device login to me though, so yeah, i'd push for shared keys.