when ssh item is using key auth, there is still a field, labeled "Password".
this is quite confusing and instead the label should change to "Key passphrase" or similar. of course, it should properly change back to "Password" if user switches back to password auth