wip: seems to pass our test (openssh parses and modifies)

test.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+set -e
+
+# creates a new key
+#ssh-keygen -t rsa -b 2048 -C root@localhost -N '' -f fixtures/privkey-rsa-2048.openssh.pem.3
+
+# changes embedded comment and creates new random dummy checksum
+ssh-keygen -c -C root@localhost -f fixtures/privkey-ec-p256.openssh.pem
+ssh-keygen -c -C root@localhost -f fixtures/privkey-ec-p256.openssh.pem.2
+ssh-keygen -c -C root@localhost -f fixtures/privkey-rsa-2048.openssh.pem
+ssh-keygen -c -C root@localhost -f fixtures/privkey-rsa-2048.openssh.pem.2
+
+# convert to public key
+ssh-keygen -y -f fixtures/privkey-ec-p256.openssh.pem
+ssh-keygen -y -f fixtures/privkey-ec-p256.openssh.pem.2
+ssh-keygen -y -f fixtures/privkey-rsa-2048.openssh.pem
+ssh-keygen -y -f fixtures/privkey-rsa-2048.openssh.pem.2
+#ssh-keygen -y -f fixtures/privkey-ec-p256.openssh.pem
+#ssh-keygen -e -m PKCS8 -f fixtures/privkey-ec-p256.openssh.pem
+#ssh-keygen -e -m RFC4716 -f fixtures/privkey-ec-p256.openssh.pem