Could it be automated via ksh/bash, so via a schellscript to check all users ~/.ssh/authorized_keys file for bad = or == ending?
One of my friend deleted the = and the == from the end of the SSH keys, so users got locked out, because that was the part of their key :)
pattern it went from this (it could be ssh-rsa and with different key length):
from="188.8.131.52" ssh-dss AAAAB....0bOJKs= COMMENTHERE COMMENTHERE
from="184.108.40.206" ssh-dss AAAAB....0bOJKs COMMENTHERE COMMENTHERE
example solution: is there a fix length for the keys? how to filter out the bad keys?