New
- Open a real shell on a server from the dashboard for top, vim and anything that asks a question. Sessions are recorded for the audit log; what you type at a password prompt never is.
- Two locks, both off by default: an owner turns it on per server in the dashboard, and the server itself must allow it. Opening a session always asks for a fresh two-factor step-up.