* docs: input format for default_critical_options and default_extensions

* s/sshca/ssh

* Added default_critical_options and default_extensions to the read endpoint of role

* Change default time return value to 0

Major changes are:
* Remove duplicate code
* Check the public key used to configure the backend is a valid one

Major changes are:
* Change `allow_{user,host}_certificates` to default to false
* Add separate `allowed_domains` role property

Trivial defaults change, committing direct to `master`.

typo

* awsec2: Added bound_region

* awsec2: Added bound_subnet_id and bound_vpc_id

* Add bound_subnet_id and bound_vpc_id to docs

* Remove fmt.Printf

* Added crud test for aws ec2 role

* Address review feedback