[Sir_Cmpwn]

~/.ssh/authorized_keys, which is basically personal certificates.

[zmyrgel]

Or just use actual SSH certificates instead of public keys so you don't need to have authorized_keys file at all.