i am using user ssh key signing. it is working very well. i have principals mapped to my user ‘testuser’:
principal1
principal2
principal3
i can sign the key with any of those principals as described in the very good documentation. what i would like to be able to do is use any combination of principals without configuring each combination in my configuration. in other words, how can i sign a key with an arbitrary collection of principals? i might want to sign with these principals:
principal1
principal2
principal3
principal1+principal2
principal1+principal3
principal2+principal3
principal1+principal2+principal3
this becomes messy very quickly as the number of principals or the cardinality of the principals increase.