How to allow a non-administrator user to register SSH keys?

The appropriate role to allow a non-administrator user to register SSH keys would be PAM.PrivilegedAccounts.Credentials.Write, as this permission empowers the user to create and update credentials.