Would be great to use ssh private keys encrypted with a passphrase. The package builder could ask for the passphrase at first login and/or store it in the settings.