[tehno]

Has anyone here implemented Google's HIBA (https://github.com/google/hiba) in addition to SSH CA/certs for the extra identity and grant checks?

I'm thinking about implementing HIBA with Vault managed SSH certs, and would appreciate anyone's comments about this approach.