Anyone have a good solution for doing this with host keys? I’m not big on TOFU. It’d be nice if cloud-init would generate some keys and pass those off to a CA t

Anyone have a good solution for doing this with host keys? I’m not big on TOFU. It’d be nice if cloud-init would generate some keys and pass those off to a CA to sign (maybe vault?). That’s my rough idea, but I’m curious what others have come up with.