There was also a discussion on this topic earlier this year, with subject "Insert certificate into agent for existing key?" https://marc.info/?l=openssh-unix-dev&w=4&r=1&s=insert+certificate+into+agent&q=b