diff --git a/authority/config/config.go b/authority/config/config.go
index 71f92830..ad645b69 100644
--- a/authority/config/config.go
+++ b/authority/config/config.go
@@ -92,17 +92,17 @@ type ASN1DN struct {
 // cas.Options.
 type AuthConfig struct {
 	*cas.Options
-	AuthorityID            string                `json:"authorityId,omitempty"`
-	DeploymentType         string                `json:"deploymentType,omitempty"`
-	Provisioners           provisioner.List      `json:"provisioners,omitempty"`
-	Admins                 []*linkedca.Admin     `json:"-"`
-	Template               *ASN1DN               `json:"template,omitempty"`
-	Claims                 *provisioner.Claims   `json:"claims,omitempty"`
-	Policy                 *policy.Options       `json:"policy,omitempty"`
-	DisableIssuedAtCheck   bool                  `json:"disableIssuedAtCheck,omitempty"`
-	Backdate               *provisioner.Duration `json:"backdate,omitempty"`
-	EnableAdmin            bool                  `json:"enableAdmin,omitempty"`
-	DisableSSHHostsListAPI bool                  `json:"disableSSHHostsListAPI,omitempty"`
+	AuthorityID          string                `json:"authorityId,omitempty"`
+	DeploymentType       string                `json:"deploymentType,omitempty"`
+	Provisioners         provisioner.List      `json:"provisioners,omitempty"`
+	Admins               []*linkedca.Admin     `json:"-"`
+	Template             *ASN1DN               `json:"template,omitempty"`
+	Claims               *provisioner.Claims   `json:"claims,omitempty"`
+	Policy               *policy.Options       `json:"policy,omitempty"`
+	DisableIssuedAtCheck bool                  `json:"disableIssuedAtCheck,omitempty"`
+	Backdate             *provisioner.Duration `json:"backdate,omitempty"`
+	EnableAdmin          bool                  `json:"enableAdmin,omitempty"`
+	DisableGetSSHHosts   bool                  `json:"disableGetSSHHosts,omitempty"`
 }
 
 // init initializes the required fields in the AuthConfig if they are not
diff --git a/authority/ssh.go b/authority/ssh.go
index 04f9c2ac..d8d5375c 100644
--- a/authority/ssh.go
+++ b/authority/ssh.go
@@ -602,7 +602,7 @@ func (a *Authority) CheckSSHHost(ctx context.Context, principal, token string) (
 
 // GetSSHHosts returns a list of valid host principals.
 func (a *Authority) GetSSHHosts(ctx context.Context, cert *x509.Certificate) ([]config.Host, error) {
-	if a.GetConfig().AuthorityConfig.DisableSSHHostsListAPI {
+	if a.GetConfig().AuthorityConfig.DisableGetSSHHosts {
 		return nil, errs.New(http.StatusNotFound, "ssh hosts list api disabled")
 	}
 	if a.sshGetHostsFunc != nil {