Hello, IPA can do local overrides for IPA users without AD trusts. It is an universal feature for any locally or not locally managed users. And it can override not only POSIX but SSH keys too. Thanks Dmitri