Hi Andy
Would it be too much administrative overhead for you to have two levels of vps images.
One would be fairly locked down, maybe with ssh on a different port, fail2ban and a basic firewall pre installed.
The second would be the image you currently provide with ssh locked to key authentication only.
If people want a vps provisioned with a password they get the first image. Users who provision with a key can choose either image.
Alex
This email carries a disclaimer, a copy of which may be read at
http://learning.longhill.org.uk/disclaimer
