[cwalcott]

Seems similar to http://news.ycombinator.com/item?id=1148328. The internals of any VPS aren't really secure from the hosting provider, although I don't why that means CSRs should have plaintext access to the root password.