Filters

[milliams]

Add the ability to filter/reject SSH certificate signing requests based on the contents of the claims (or anything else). This could be simple exact matches on certain claims, or could be wildcard matches on email addresses.