Also seeing the face of Brexiters would just be worth it

Cane non mangia cane

They can respectfully choke on my massive GDPR

Try putting -vvv when you connect and see what’s happening. I can imagine this happening if you have multiple identities (private/public key pairs) on the client and you hit a max retry limit. Pub key is always tried first, and it should ask for password once all the local keys have been tried.