Wikimedia releases Keyholder: a shared read-only SSH agent for bastion hosts which allows public key authentication to other hosts without revealing the private key to each user.

#ssh #bastion #keyholder