Shared secrets are a really dumb way to handle authentication. Set up a CA and sign the public keys for machines you provision to employees. All the tools are

Shared secrets are a really dumb way to handle authentication. Set up a CA and sign the public keys for machines you provision to employees. All the tools are there, most software supports it (not the iPhone of course, although I’m sure there’s a hackish workaround that involves periodically sending apple money to sign something.)