[yjftsjthsd-h]

You could also deal with updating host keys by signing them and just having clients trust the signing authority.

[haarts]

I liked this article about it: https://smallstep.com/blog/use-ssh-certificates/

[egberts1]

Does it work with closed network like in a whitlab?