samthegeek’s Twitter Archive—№ 64,976

film_girl Dynamically generate and insert your admin credentials from a secrets store! (That's how we did it at the old place). Bypass for emergency was keys stored on offline yubikeys locked in a safe which the engineers did not have the code to. Enforced a 'two-man rule'