- [x] Recent distro versions - [x] sshd AllowEnv of `ansible_ssh_args` et al - [x] install `setfacl` for unprivileged become - [x] install runas? doas? - [ ] Idea: tarpit sshd (e.g. on port 23), for testing connection timeout - [ ] Idea: Restricted shell - [ ] Idea: Posix only login shell, e.g. [dash](https://en.wikipedia.org/wiki/Almquist_shell#Dash) - [ ] Idea: Non-posix login shell, e.g. [fish](https://fishshell.com/) - [ ] #1023
ansible_ssh_argset alsetfaclfor unprivileged become