Comment by securam

Some might argue SSH certificates are even better: https://smallstep.com/blog/use-ssh-certificates/