search for: blahonga

...would have a lifetime, and this lifetime would be updated each time you hit the entry in the database. If your tuple does not exist in the database, I could see sshd spitting back "Sorry, you're coming from a host/etc that you don't usually come from, please connect to https://foo.org/blahonga to authenticate further." and then closes the connection. Then on that web-site (or whatever the admin makes it spit back), you have a means to administer the cache entries. "So, you're coming in from a web cafe? Ok, set timeout to 1 day.", etc... Is this sort of thing doable...