Short answer: you can't.
(neither can you control user won't write password in a paper next to keyboard)
Wild guess & long answer :
you might which to use password less ssh authentification from relay host where :
- user log with central account (like active directory),
- user have no root acces on relay host.
This involve, either using a commercial solution (and spending money) or building your own (and assuming unsecure/untested access protocol).
two shades of security
there are two main goal in access control:
- be compliant with some norm (survive a security audit)
- effective access control (prevent and stop intrusion)
Commercial solution could provide first one, thtat is log when/where from user connect, what user type, have statistics about connection time and so on.
You could develop a "stuff" on your own (I did for a customer), you'll have to spend time and money to set up your solution.
Both previous solution would allow you to pass/bargain a security audit.
Keep in mind if you realy want to control access you'll have to set up a knowledgable security team, working in shift, monitoring access and able able to understand and react to alert and attack.