Package idea: pam_ussh

Apparently uber has a package called pam_ussh

which allows you to use a ssh CA to authenticate with pam.

Sadly I think this is above my skill adding it to nixpkgs.