An SSH certificate rollout is correct and clients still choose the wrong identity

A certificate-based SSH migration is rolled out and some users still fail even though the correct certificate is present in their environment.