TrustedUserCAKeys /etc/ssh/trusted_ca
AuthorizedPrincipalsFile /etc/ssh/auth_principals/%u_principals