- need to save ssh keys on reboot
  - else you end up with sops issues & ssh known_key changes every reboot
- need to sort out password