Automate SSH Host certificate issuance by way of X5C provisioner

[dopey]

This is blocked by having the ability to specify values from the X5C certificate in certificate templates -- smallstep/certificates#433.