I would like to run a command on a user that allows them to
ssh in using a password only on their next login, and when they do, immediately force them to use keys from then on. If they switch to a new client, I'd run it again to allow them to login once to copy their new public key. I think I could script something using a special group and the sshd config, but is there a standard way to handle this kind of thing?