We should be phasing out all rsa based keys. Please update all keys to use an ed25519 key and remove the old rsa keys. This will include service accounts and user accounts.
User account keys will need documentation so that the end users (many not heavily technical) can update their ssh config to use the new keys.