A certificate authority that removes eleven authorized_keys files and creates one key that must not be lost. Concentrating eleven files into one key is the point of a…
A year of eight-hour certificates rather than an authorized_keys file, and the operational reality of it. The mid-incident expiry is the failure mode that theory does not predict,…
Adding a person meant editing a file on eleven hosts, and removing one meant remembering to. The eight-hour validity is what makes revocation mostly unnecessary — a departed…
The database password was in the repository, then in the image, then in an environment variable readable by anything that could run ps. Where it went next.
Managing authorized_keys across thirty servers means a configuration run to add a colleague and another to remove one, and the removal is the one that gets forgotten. Access…