Hi folks, Problem: Deploying a custom ssh authentication scheme common to all Debian hosts in the lan appears to be apita, esp. since the next openssh upgrade might put the default config files upside down again. What would you consider best practice to keep your ssh hosts (>300) in sync wrt the most important config optiones? openssh is version 7.4 Every helpful response is highly appreciated Harri