TL;DR: prmana is a PAM module and agent that replaces static SSH keys with short-lived OIDC tokens, bound to proof-of-possession via DPoP (RFC 9449). Rust, Apache-2.0. No proxy, no SSH CA — just your IdP and your Linux hosts. Static SSH keys are the problem Every org with more than a handful of Linux servers has the same issue: SSH keys everywhere, rotated never. That key a developer generated i