how to scp from one box to another with no root ssh?

[Douglas Allan Tutty <dtutty@porchlight.ca>]

In the past, to move config or script files from one box to another on
my home network I've used scp or rsync.

However, recent discussions on the list have pointed out that root login
with ssh should not be allowed.

How then to copy files that either only root can read or only root can
place, or that need owner/permissions to be unchanged?

I have sshd setup to only allow ssh based on pre-existing keys (no
password login allowed), and it only listens on the local interface, and
I've got shorewall running and doesn't allow ssh to/from the net.  

What am I missing?

Thanks,

Doug.