Handle code updates in case the deploy directory or an ancestor root was remounted.
Disable password-based SSH login vSphere after the SSH key has been uploaded.

Also allow configuration of an initial SSH password.

Disabling password-based SSH is far more secure, especially when using a static, base password.  On the off-chance this screws up, the user should always be able to log into a console session from vCenter.