TODO
====

* mount-media: lvm support.
* import-keys: do not use ssh if host is localhost.
* import-certs:
  * concat.pem; cert.pem and cert.crt symlinks.
  * restart services.
* compile:
  * per-node compiled files (node/nodename.yaml and secrets/node/nodename.yaml).
  * backups: automatic definitions for per-node backup::users.
* provision:
  * SSH installation should be optional and disabled for TPC profile.