Somewhat related: Vault has a PKI backend that can help facilitate this. You'll need to create some tooling around it, but we've had great success rolling it out at my company.
Not surprised to see this, I've run into many issues with Meraki devices over the past 2+ years.
Their support team is amateur at best; at one point I had 6 Meraki engineers working on a DHCP problem (yeah...DHCP) and their recommendation after several weeks of troubleshooting - do a factory reset.
I have dozens of stories...don't even get me started.
Two weeks ago I called 911 after hearing a loud car crash within a few blocks of my apartment. Took out my phone, placed the call, and listened to music for ~6 minutes before I was able to talk to someone. Once the 911 dispatcher took all of the information I had, the call was transferred (another ~3 minute wait). The original dispatcher introduced herself to my local dispatcher as "911 north".
https://vaultproject.io