On: Non-repudiation and the joy of knowing you've been hacked

[mjolk]

This is the role of configuration management software. Applications should not have hardcoded passwords and all decent configuration management systems allow for controlling access.