There should be an option to have new rotated SSH keys send to an external source via SFTP or some secure login. Just in case HA failed for some reason and we lost the Primary we still have the keys to rebuild from scratch.