We use CFengine 3 to manage personal accounts and ssh keys on servers. As CFengine continuously checks and converges configuration, if someone set bad permissio

We use CFengine 3 to manage personal accounts and ssh keys on servers. As CFengine continuously checks and converges configuration, if someone set bad permissions on their ssh file or remove the authorization it is automatically corrected before five minutes have elapsed.