The "server refused our key" bit didn't link to the public-key auth chapter,