> I think the point is getting rid of this risk: What risk ? If I am (for example) running an OpenBSD firewall or OpenBSD BGP router then there's nothing to f

> I think the point is getting rid of this risk: What risk ? If I am (for example) running an OpenBSD firewall or OpenBSD BGP router then there's nothing to forget. It really is as simple as I said it was. The "forgive me if I forget" was because I wrote my answer from memory instead of looking at my actual script. There really is absolutely zero need for NSH or any tool like it on OpenBSD if you're just running a router/firewall.