If we are looking at improving the security of SOS could we add a simple way to add and remove SSH keys for SOS, post launch, using the portal so customers can flush away old employee keys and not have to share common keys for all servers. This plus ACL would be a great addition to SOS and help with inside man attack vectors. This might become common as more organizations use VMWare on Metal where SOS is part of the launch and maintenance workflow.