Login during migration should require ssh key/strong password

ATM it allows imported ssh keys (good) and a static password (bad).

The goal is to ensure only authorized people can log into the machine while the migration runs. One option would be to auto-generate a strong password, display it for the user and then set it for the migration account