#https://developer.hashicorp.com/vault/docs/secrets/ssh/signed-ssh-certificates
{
  "algorithm_signer": "rsa-sha2-256",
  "allow_user_certificates": true,
  "allowed_users": "*",
  "allowed_extensions": "permit-pty,permit-port-forwarding",
  "default_extensions": {
    "permit-pty": ""
  },
  "key_type": "ca",
  "default_user": "admini",
  "ttl": "30m0s"
}