Move the cert-authority statement into the file.

This way, the only thing we pass on the commandline is the SSH pubkey
itself.