Issue SSH certificates
Sign SSH user and host certificates.
As pki-admin
Open /ssh-certificates

Click Copy CA public key

Fill Key ID with "[email protected]"

Fill Principals with "deploy"

Paste the Public key (authorized_keys line)

Fill TTL hours with "8"

Click Issue certificate
