> I would really not like people to be able to ssh into the cyrus account. Look into how your OS restricts logins. No doubt pam or whatever can be configured to specifically deny non-localhost logins to that account. Most handle root this way too.