This installer places OSH - Client in your Applications folder and links the osh command into /usr/local/bin so it works from any terminal.

OSH replaces long-lived SSH keys with certificates that are issued only after your request is approved, and that expire on their own:

• every session is approved on a trusted iPhone before access is granted
• certificates are short-lived, so nothing useful is left behind on your machine
• the private key never leaves the Secure Enclave

Administrator rights are required to create the command-line link.