If you’re not using SSH certificates you’re doing SSH wrong – smallstep