Tarsnap. You can create a key that has write only access for your automated backups and a different key that has full access for administrative purposes. That

Tarsnap. You can create a key that has write only access for your automated backups and a different key that has full access for administrative purposes. That is what we do anyway.