http://keybase5btp2qikoau6u326pvotn47gb55mo6fjxxyxdoywiinomr5id.onion/blog/keybase-ssh-ca
It also keeps detailed audit logs on
signed keys including information about what device provisioned a given key. kssh is a wrapper around ssh , and is the client side of the chatbot, sending signature requests via Keybase chat.
As a user of the CA bot, you
don't have to think about creating new keys, key expiration, or identity. You just run kssh user@server instead of ssh user@server and keys are automatically provisioned in the background.