> You're asking for something that is supported in X.509

There's more than 1 way to skin this cat, and no, I'm not asking for the a specific solution you suggested.

SpaceX can implement any internal auth-scheme they choose to connect to a handful (not 41) of SSH intermediate instances, which then connect to the terminals