[tptacek]

This is also part of the reason big fleet operators like SSH CAs, since they work for host keys and solve the key continuity problem.