Okay, so I lied somewhat in my UniConf paper for GUADEC. The paper admits that I lied, but doesn't say about what exactly. I'm going to spend some time this weekend and over the next week trying to make as many of those lies as possible come true, thus making myself retroactively more honest.
The hardest part to get right will be the sample monikers. I probably should have tried those before I included them in the paper.
ssh+2FA to all your machines, anywhere, without opening firewall ports.