[ryanto]

This is interesting and certainly solves the problems mentioned in the article. However, it does introduce a whole bunch of new attack vectors.

Have you thought about the idea of selling the product as a machine that clients can run in house? Something that is only accessible to them, similar to how GitHub enterprise works.

[borisjabes]

We definitely intend to provide the secure vault component as something you can host internally (exactly like GitHub Enterprise).