Just leave it as unspecified/all interfaces. It will only be reachable by the management network based on the firewall zone input policy.
This would probably make sense to have in a new thread since it's not really about management VLANs (it's about ssh keys).
You're welcome. Glad we got it all set!
If your problem is solved, please consider marking this topic as [Solved]. See How to mark a topic as [Solved] for a short how-to.
Thanks! 