I use ssh keys… And some firewall rules. I do have an internet only and a LAN only VLAN at least.