Do you have a username/password or username+certificate that a script kiddy is likely to hit in their first 10,000 attempts?

If yes, you have a much larger problem that can't be solved by port knocking or moving ssh to a different port.

If not, then you're trying to solve a problem which doesn't exist anyway.