[system-administrators-guide] Using OpenSSH Certificate Authentication