If set, users with an SSH certificate containing an authorized principal in their SSH agent are able to log in. Specific options are controlled using the security.pam.ussh options.
Note that the security.pam.ussh.enable must also be set for this option to take effect.