Box

Box is your registry of machines and the certificate authority that gets you onto them. Register hosts (or let Provision add them for you), group them, and hand out short-lived CA-signed SSH certificates instead of scattering long-lived keys. A host trusts your CA once; access is then granted per-certificate and expires on its own.