distributed ssh key management

Hey folks,

Has anybody come across any actively developed OSS or commercial
SSH key management solutions? Somethign sufficient for managing
installs over a reasonably large installed solaris base, alerting
on tampering, allowing 'single action' management as keys are
removed (staff leave, application retired, whatever) or join?

Anything considered; SSH mods to run from LDAP servers (F-Secure?
SSH.com? OpenSSH?), push based key distribution, centralised
references to key repositories, whatever.

I wrote something to do this many years ago and would rather not
ressurect home grown code if there is a 'better' solution now
available. Currently SSH is the product that will be used for
the connections, so while I'm interested in alternate products
from a 'thats nifty, glad to know about it' perspective, I'm
much more interested in personal experiences, hearsay or references
to stuff designed to plug the key distribution hole in SSH at
an enterprise level.

Thanks,

Matt