> (It's actually possible to glue the general PKI infrastructure into SSH certificates. Please do not do this)

Can someone elaborate why? We are already depending on lists of known good CAs for everything (even banking). Why not leverage the same for SSH as well?