- key deployment
- add a monkeysphere auth subkey to every openpgp key used for backups.
- make backupninja wrap around monkeysphere: http://web.monkeysphere.info/doc/user-ssh-advanced/
- - http://current.workingdirectory.net/posts/2011/puppet-without-masters/
- - http://andrewbunday.co.uk/2012/12/04/masterless-puppet-wrapper/
- - http://semicomplete.com/presentations/puppet-at-loggly/puppet-at-loggly.pdf.html
- - https://github.com/jordansissel/puppet-examples/tree/master/masterless
- sshd:
- https://stribika.github.io/2015/01/04/secure-secure-shell.html
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774711#60