>> i whacked you onto the bastion host's authorized_keys > that works and more easily! i did a find on services and added everyone's public key to authorized_keys on the bastion host these systems are rough. no one loves them. randy