In e00a7fab we made an assertion that
fast SSH key lookups don't cover deploy keys. In fact, they do. Deploy
keys don't fit well into an **SSH certificate** usecase, however, so I
think that's what was meant.