BZ #1134139 - Track Real User behind SSH logins

Why are the special logins 'S' and 'A' needed?  I might be missing something obvious when looking through this.

The key name already has the 'domain-' and 'application-' identifiers for System and Application keys respectively.  If oo-trap-user were to see an ssh key missing OPENSHIFT_LOGIN could it check for the 'domain-' and 'application-'?  It could also warn in the event that a key doesn't match the form it's expected to let the admins know the keys need to be regenerated (or readded) in order to accurately report OpenShift usernames.