services.openssh.settings.AuthorizedPrincipalsFile

Specifies a file that lists principal names that are accepted for certificate authentication. The default is "none", i.e. not to use a principals file.