step ca policy authority ssh user deny
step ca policy authority ssh user deny -- manage denied SSH user certificate principals
step ca policy ssh user deny <subcommand> [arguments] [global-flags] [subcommand-flags]
step ca policy ssh user deny command group provides facilities for managing SSH user certificate principals to be denied.