[api]

The problem is largely with their docs, or lack thereof. Just figuring out how to use one as a token for ssh is incredibly painful. The docs are very "enterprise," meaning half-done, overly complicated, confusing, scattered, etc.

[tptacek]

It is extraordinarily annoying to set up a Y4 for SSH. We use gpg-agent in ssh-agent compat mode.

[noinsight]

It would be better if they supported the OpenSSH PKI format.