force ssh to use key AND password
 

Is there anyway I can force ssh connections to require a known key and a user password before allowing successful login?

You might be able to kludge something together by creative use of stacking PAM modules.

Alternatively, you could just come up with a system so that keypairs always used a passphrase. (i.e. You might have to generate the keys yourself rather than letting users do it.)