Point in Time Recovery for Postgres Flex using Barman

Anyone run into ssh trouble when doing this? When I try to run the recover command

fly pg barman recover <postgres_machine_id> -a <app_name> -b latest --target-time "2024-03-08 14:17:32.992288"

I get

Connecting to <ipv6>... complete
ERROR: Unable to connect to the target host using the command 'ssh root@<postgres_machine_id>.vm.<app_name>.internal -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null'

I get the same error if I ssh into the barman instance and run the ssh command by hand:

root@<barman_machine_id>:/# ssh root@<postgres_machine_id>.vm.<app_name>.internal -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null

Except it also spits out this info:

Warning: Permanently added '<postgres_machine_id>.vm.<app_name>.internal' (ED25519) to the list of known hosts.
root@<postgres_machine_id>.vm.<app_name>.internal: Permission denied (publickey).

I tried copying the contents of /root/.ssh/id_rsa-cert.pub on the barman machine into the /root/.ssh/authorized_keys file on the postgres machine, but I get the same error. I even tried generating a new ssh key pair, but same error.