cisco 3650 radius auth -and- ssh pubkey?

Got a bunch of cisco 3650 version 16.3.5b. These are set up for radius auth, and that works. All of my old boxes are set up for ssh pubkey auth, and that all works. Can I also use ssh pubkeys for auth as well on boxes that are set up to use radius? If so, can some kind soul point me to how to get the two auth methods to coexist? I can get one or the other to work on a given box, but not both.

thanks.