This problem has been solved long ago in OpenSSH:<p><a href="https:&#x2F;&#x2F;www.digitalocean.com&#x2F;community&#x2F;tutorials&#x2F;how-to-create-an-ssh-ca-to-validate-hosts-and-clients-with-ubuntu" rel="nofollow">https:&#x2F;&#x2F;www.digitalocean.com&#x2F;community&#x2F;tutorials&#x2F;how-to-crea...</a>