[19:28:00] <jeremystott>	 Hello, I've recently discovered Lyft's python-bless client and kms-auth, and am excited to use them.
[19:28:10] <jeremystott>	 I've got a question regarding creating users on the hosts you want to SSH to using SSH Certificates.
[19:29:51] <jeremystott>	 There are a bunch of ways to synchronise users on hosts. But is it a good idea to generate the user on-the-fly? If the host trusts the CA, then it can trust the principals in the certificate. Could the host just create a user if it doesn't exist on first connect?