Enhancement: Use an X509 Certificate to gain credentials

[ferventcoder]

In the world of SOx, the less people that know a password the better.

I would like to be able to pass a thumbprint to a machine and it be able to return the credentials based on hashing some salt with the private key of a certificate.

For a particular environment, no one will have access to the private key except the deployment person. The deployment person will not know the password, only the security person who set it up based on the same ideas that dropkick will use to get the credentials.

[ferventcoder]

This will also help reduce the number of keying errors by the deployment agent.

[ferventcoder]

This means a different certificate per ENVIRONMENT.
It also means you can't accidentally run something in an environment it was not meant for since it won't install without the certificate.