[Unit]
Description=Ensure managed SSH public keys are installed in /root/.ssh/authorized_keys
Documentation=man:sshd(8)
After=local-fs.target
Before=ssh.service sshd.service
ConditionPathExists=/usr/local/share/root-ssh-keys/authorized_keys

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/ensure-root-ssh-key
StandardOutput=journal
StandardError=journal

[Install]
WantedBy=multi-user.target