Better security through obscure somehow-not-default sshd settings
Be explicit about supporting pubkey authentication
Be explicit about where to get authorized keys from
Fix handler naming inconsistency
Set new keys as authorized_keys
Add bootstrap script