[candiddevmike]

It looks like you still have to manage users on the hosts for PAM, including SSH keys (or use Vault I suppose). It's too bad that this can't perform all of that functionality--setup a server, install a boundary client, and manage all of the PAM things through Boundary.

[malnick]

We plan on integrating with Vault to perform transparent credentials injection in the not so to distant future. This is a 0.1 product after all, and we still have a lot to build!