Host alpha
  HostName 10.0.0.1
  User deploy
  # purple:vault-ssh ssh-client-signer/sign/my-role

Match host alpha
  CertificateFile /user/configured/match-cert.pub
  User override

Host beta
  HostName 10.0.0.2
