Currently:

Upon migrating guest to remote server, password less ssh is permanent.
Due to that, from terminal able to log on to the remote server with out prompting password

Propose:

Upon completion of migration, password-less ssh has to revoke.

Option 1: As migration need password-less ssh, without which migration cannot be done, so it should be delete once migration is completed.

Option 2: lets update user that on migration password-less ssh will be established till migration is not completed(May be as document or in UI). And ask user if he was to delete the password-less ssh login or not in migration UI panel.

Option 3: Using libvirt.openauth. However I was not able to figure out any proper documentation on how to use openauth.

As this is kind of security issue, we can go with Option - 1 to fix the issue for now, enhancement is always possible. :)

Thanks,
Archana Singh