FYI I love your work with Gimlet, etc. I too would love "native" support for SSH CAs in EC2. What I ended up doing is adding a line to every EC2 userdata scrip

FYI I love your work with Gimlet, etc. I too would love "native" support for SSH CAs in EC2. What I ended up doing is adding a line to every EC2 userdata script that would rewrite the /home/ec2-user/.ssh/authorized_keys file to treat the provided EC2 keypair as a CA instead of a regular pubkey.