Basically you can use Tailscale for authnz instead of plain old keys and they add some extra logging and stuff [1]

[1] https://tailscale.com/docs/features/tailscale-ssh