Good advice, except the &quot;remove all system passwords&quot; part. Do not do this. It&#x27;s a really bad idea. There are occasions where you <i>do</i> need to authenticate using a password, most importantly on the local console - what if your server lost network access?<p>And that sudo workaround is bad since it requires agent key forwarding, which you shouldn&#x27;t use for the reasons the author himself noted a few paragraphs up.