One ring to rule them all,
One ring to find them,
One ring to bring them all,
And in the darkness bind them. – J.R.R. Tolkien, The Lord of the Rings
If you are not a fan of The Lord of the Rings, the executive summary is that you can simplify life and improve security for derived credentials if you only distribute one authorized credential, used by a thin client to access a centralized virtual operating system that holds all the other keys. For those with an appetite for a mystical romp through Middle Earth involving magical keys and rings, I suggest you place your tongue firmly in cheek and proceed.