decrypt with ssh private key / multiple encryptions

[t1]

In addition to a java keystore file, we could use the ssh keypair in the .ssh directory.

Note that while the server certificate is often shared between several nodes of a cluster, the ssh key is generally not; so we'd need a level of indirection to be able to have multiple encryptions in a file.