hi, maybe not exactly answering the original quaestion, but informative:
http://hamwan.org/Standards/Network%20Engineering/Authentication/SSH%20Witho... http://hamwan.org/Standards/Network%20Engineering/Authentication/SSL%20witho... http://hamwan.org/Labs/RouterOS%20Extensions.html
same here, traffic needs to be in the clear, control/admin channels can and should be protected.
73 de stefan ei4ku