1 files changed, 11 insertions, 1 deletions
diff --git a/lib/puppet/type/ssh_authorized_key.rb b/lib/puppet/type/ssh_authorized_key.rb
index 5c4df53..4eff840 100644
--- a/lib/puppet/type/ssh_authorized_key.rb
+++ b/lib/puppet/type/ssh_authorized_key.rb
@@ -107,7 +107,17 @@ module Puppet
 
     newproperty(:options, array_matching: :all) do
       desc "Key options; see sshd(8) for possible values. Multiple values
-        should be specified as an array."
+        should be specified as an array. For example, you could use the
+        following to install a SSH CA that allows someone with the
+        'superuser' principal to log in as root
+
+             ssh_authorized_key { 'Company SSH CA':
+               ensure  => present,
+               user    => 'root',
+               type    => 'ssh-ed25519',
+               key     => 'AAAAC3NzaC[...]CeA5kG',
+               options => [ 'cert-authority', 'principals=\"superuser\"' ],
+             }"
 
       defaultto { :absent }