Ruben

hmmmm not sure about that id move away from managing authorized keys by hand entirely and use SSH certificates or a cloud session manager. Fewer of these surprises. just my 2 cents

hmmm does Event 18 always name teh same core? ??