- strip from debugging symbols binaries and libraries
- install a customized/optimized kernel (currently we take the one
  from the master/builder)
- possibility to set root password, for now we copy the one
  from the builder/master
- minimize and check permissions. passwd and group entires
- local logging and/or remote logging to monitoring station?
- sensors
- SNMP
- /etc/named
- sshd
  - which key to use for sshd? ssh_host_rsa_key is commented out in 5.9
- /etc/moduli: should it be generated for every new installation?