Additive web content updates
SSH access control
CA intermediate certificates
HTTPS virtual host certificate chain and proxy exclusions
Deploy SSH identities
Diaspora deployment (quick and dirty)

Do read the source and note the manual steps.