Comment by justincormack

Hey, also look into post compromise security eg see https://eprint.iacr.org/2016/221.pdf

This stuff is way off Dockerfile level, sorry.