Request a short-lived OpenSSH user certificate using your own public key, then connect directly to your server with your private key. Configure your server to trust the CA once, without distributing individual user keys. Certificates are capped at 15 minutes.
One launch caveat: the issuer currently lacks requester authentication and authorization.
Video: https://youtu.be/WeXxz9asOXs?si=...
Product to Try: https://proto-ephemeral-ssh.onre...
