Server needs support to receive a credentials to sign

[gdestuynder]

For ex:

• ssh bcorp client generates new key, sends public key
• fed access proxy signs pub key, returns time limited signed certificate
• ssh bcorp uses priv key to login and provides signed cert