TODO: Ask security.txt people how is signing with SSH supposed to be handled or are alternatives to OpenPGP OK?
I guess there is no harm in adding it and I am hosting some services that can be seen publicly while they may be password proteccted or similar. Ref: https://securitytxt.org/