Issue SSH host and user certificates
Replace long-lived SSH keys with short-lived signed certificates.
As pki-admin
Open /ssh-certificates
Click Copy CA public key
Fill Key ID with "[email protected]"
Fill Principals with "deploy"
Paste the Public key (authorized_keys line)
Fill TTL hours with "8"
Click Issue certificate
