X.509 support in ssh (revisited)

[Frank Cusack]

Took me a few days to catch up on this dying thread, sorry to bring it
into "mostly dead" state. :-)  mm.. MLT

X.509 support would be very useful for a site like mine, where I have
many thousands of hosts and want an option besides GSS-API/krb5.  I
don't want to (necessarily) depend on the KDC being online; and am
comfortable disting a CRL at some interval.

/fc