Nice guide. One nitpick: > Add a user for our project and give him a decent password: Better off not giving the encbox user a password at all and only allow S

Nice guide. One nitpick: > Add a user for our project and give him a decent password: Better off not giving the encbox user a password at all and only allow SSH key based login. You can already login to the primary/root account and sudo/su to setup the encbox user and copy SSH keys.