2fa apt automation bash bind built-in Certificate challenge change closed source configuration Debian DNS-01 echo escape hatch fail fido2 key letsencrypt Linux login monitoring munin networking Open-Source openssh pipe process substitution proprietary read repository RFC2136 script secure security sources ssh SSL stdin success testing TLS Ubuntu Upgrade yes