One key per line, optionally prefixed by options such as restrict, from= and command=. It controls who may log in, not whether the server is genuine (see known_hosts).