A few questions

This is an interesting project but I have a few questions that don't seem to be raised in the readme.

1. What kind of security audit and review has been done over the project ?
2. Has any team or company been approached thus far for security review or are you just hoping since its a public github it will get done at some point ?
3. Has there been any approach to the openssh team to roll in any of the changes (which from my cursory reading is really over certificate handling but I'm probably wrong here) ?
4. If the answer to number 3 is yes - do you have a link to any discussion with that team I could review ?

Start with the README and existing project security materials, then check whether the repository mentions audits, external reviews, or OpenSSH discussions. Document the answers to the four questions, including links to any relevant review or upstream discussion; done means the README or linked documentation provides clear, sourced responses.

Written by the indexing model from the issue text.