Minimal SSH certificate authority.