As we will, hopefully, have a root certification authority we should generate not simple files but certificate signin requests.
We can convert from openssl to openssh key format with ssh-keygen -f private.pem -y > private.pub so we can move the generate method to the Authority base class