I think we should only have:
* public (== drop)
If in doubt, choose public.
The only question is whether we need something special to allow ssh, but the user can modify the public level if they trust their password enough...
Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds