Allow users to change their SSH Key via console
At the moment, when a user wants their public SSH key changed, they have to contact an administrator to do that for them. I propose making it possible for the users to change their public keys by themselves e.g. via a command on the CLI.
Example: changepk "ssh-rsa ... alias@pc" The tyshell would then run a syntax check against that key and accept it. For added Layer 8 security (i.e. making sure the new key is valid and the user is in possession of the new key), it could temporarily replace the old key with the new one, require the user to log in with the new key while keeping the old session alive. If the login is successful, the new key is kept, if the old session is closed before a new login or if the new login does not happen within a certain timeout, the old key is restored.
As the tyshell is run under user privileges anyway, this should not have any security implications (or at least I can think of none).