[URfejk]

>But for a security-critical context such as this, Debian with it's stability and very security-aware package maintainership seems like a better choice.

Or Centos.

[eikenberry]

In my experience CentOS means EPEL and EPEL means throwing that stability and security-aware packaging out the window.

[qz2]

This. Rationale is SELinux.

[joana035]

Linux security modules, always good to have. AppArmor, SELinux, Smack, and TOMOYO are good examples.