CA isn't terribly difficult. https://keybase.io/blog/keybase-ssh-ca