DEVICE-BOUND SSH IDENTITIES
Public SSH keys with signed profiles. Private keys never belong in this registry.