Great post by Pablo Lorenzzoni about using one-time passwords for SSH logins (and more through PAM).