Moderator office hours: SSH certificates week

Office hours this month skewed heavily toward certificate-based SSH. Most questions were about renewal choreography rather than key math, which matches what we see in hiring loops too. We walked through documenting principals in plain language so handoffs do not depend on one engineer's memory. We also talked about failure stories where renewals raced with deploys. We reiterated that certificates do not replace culture. Teams still need code review on authorized principals files and clear on-call ownership. If you missed the session, the recap thread is pinned in the community forum with links to the lab VPN guide.