TrustedUserCAkeys requires the public key to be exported, signed by the CA with ssh-keygen to create a ...-cert.pub and then imported back to the system that generated the public key. Android vx/connectbot appears not to allow the cert to be imported. Could this feature be added, please?