prettybunnys

https://www.golinuxcloud.com/network-bound-disk-encryption-tang-clevis/

something like clevis/tang might help but ultimately if someone has physical access to your box then they can potentially get it all anyways 🤷

from a “managing people” standpoint it’s a little easier (at least in my field) too, because it becomes obvious when someone’s product is shit if I’m paying attention

also i really like shitting at home