If you want x509 support, you'll have to look at a commercial version of SSH. And, at that point, you would need to use a sftp/scp client built to follow their login process if they require an x509 ...
The certification follows FCT’s adoption of Bluink’s IDV app ID-Me, which uses selfie biometrics to match users to their ID ...