don't bother gssapi
workaround ip addr until vpn
add backup user pubkey
manual make baseconfig box on DO