Feature - AuTA should run security checks at startup and periodically
Description
Misconfigurations can severely impact the security of AuTA or the services residing on the same machine as AuTA. Examples include running the core as root or leaving the authentication database world-accessible.
Priority
Low - Common sense says that services should be properly isolated. Still, this is a nice-to-have because server administration can be wildly complicated.
Definition of done
- AuTA should verify the security at startup and refuse to start if the system is not sufficiently secure
- Periodic re-checks should continue to verify and warn about any violations