Not a sec guy myself, but I really love how easy it becomes to manage my infra with this! Thanks for sharing.

Any significant/obvious downsides to this approach, anyone?