Hi

I think it could be useful if deployment keys syntax supported OpenSSH-style constraints added to keys. I mean especially from="" syntax (see http://www.eng.cam.ac.uk/help/jpmg/ssh/authorized_keys_howto.html)

It would prevent some problems in case of leakage of a key or will bring possbility to deploy only from specific (trusted) locations.