[druiid]

I personally wouldn't trust CircleCI to do this stuff either. They already don't exactly have a great track record for security.

[benatkin]

Upon thinking about it, I agree. I don't want CircleCI to have the SSH key.

I think webhooks are a good model. At worst it could deploy at the wrong time (which would be pretty bad).