Firstyear

@mbyrdap I'm coming back to this ATM and I'm wondering if this is solved via a scim endpoint you can issue updates to. Or is this that you want a...

I think this is actually solved by #211

> And this is another usecase of #1703: We can do webauthn on remote machines via one-time-link. Not really. This is for CTAP2 on a local machine where you might...

IIRC it's not actually doing passkeys/CTAP2 locally, it pops a qr code to scan to go to an oauth2 portal. It's passkey storage also is extremely primitive compared to ours....

@kenjitamura Also another issue here is we don't have a way in pam via something like sudo to distinguish local user vs remote an ssh, so we don't actually know...

@jceb I actually was thinking about this the other day. I think I will not add support for this, because there are many reasons to need to restart the server...

@jceb At the end of the day, the issue comes down to time. Do I spend a month or two working on a feature that keeps a single node up...

I actually think we need to clamp down on "you can only upgrade one version at a time", that way we can * trim all the old migration code *...

That's a good idea, I think rather than committing the DB's, the ability to "setup and load a bunch of sample data" is probably better because then we can also...

We may need some checklists or procedures we can follow before a release to ensure this surface area is covered too. :)