The CLI tool will be the primary method for interacting with the SSH CA service. For now, it supports a single operation: `sshca-cli host sign`, which requests a certificate to be signed by the CA service.`
