You can always host your own SSH CA pubkey server.

It is called an “AuthorizedKeysCommand” in `/etc/ssh/sshd_config`.

https://jpmens.net/2019/03/02/sshd-and-authorizedkeyscommand...