AddSSHKnownHost adds a "@cert-authority <hostport> <public key>" to the users known_hosts file if not already present there or system wide.

AddSSHMatchBlock adds the string generated by GenerateMatchBlock() to the user's ssh config file, if not already present there or system-wide.

AgentHasCertificate returns a bool indicating whether a certificate issued by oinit-ca for the given host is currently present in the agent.

AgentRemoveCertificates removes all certificates issued by oinit-ca for the given host from the agent.

GenerateKnownHosts returns a string that can be added to the user or system known_hosts file.

pathsHosts returns the user and system managed hosts file path.

pathsConfig returns the user and system config file path for OpenSSH.

pathsKnownHosts returns the user and system known_hosts file path for OpenSSH.