[medellin]

Signed ssh certs make your life easy here

[superq]

Maintaining your own PKI isn't exactly easy unless it's your full time job.

[medellin]

Its fairly easy to get setup and after done correctly pretty low maintenance. But i have done it a few times at this point.