keywarden/TODO.md

Next steps:

Certificate Generation:

• User account is created
• User can input SSH pubkey into profile page
• Keywarden creates signed SSH Certificate from User's pubkey and Keywarden CA

Grant:

• User requests access to target server
• Access request approved
• User has linux account created and has key / cert trusted by target server
• User can log into account

Revocation:

• User has access expire or revoked
• Keywarden removes key / cert from target server, or invalidates on Keywarden's side
• Keywarden removes object permissions
• User cannot access server anymore