Ready to be used in a restrictive environment (no net, no OS services), even by /sbin/init

• Ready to be used in a restrictive environment (no net, no OS services), even by /sbin/init

• May have no daemon, so

  • No single point of failure
  • One process can't harm another's affairs with the key database
  • No communication protocol, so no extra fat here
  • No security holes, since all security is handled directly by the OS
  • Clean and simple

Notes: