additional close system: https://github.com/jschauma/jass

this solves the large team problem, too- it fetches membership data and ssh pubkeys from ldap. great if you have it, but only exists in large organizations.

this of course doesn't do the gitwork for you, but it does avoid creation of another set of keys to be mismanaged.