I think a lot about this. If you automate the process, you still SSH in to production machines, but implicitly. If done properly, it should be sufficient to ma

I think a lot about this. If you automate the process, you still SSH in to production machines, but implicitly. If done properly, it should be sufficient to make a package known to your environment and use a remote execution manager like Salt[0] to initiate the update process. [0]: http://saltstack.org/ http://saltstack.org/