Сделан
В To Do у них тоже хватает угара, например:
* buy a SSL certificate or self-sign so key transfer is not in the clear
* passphrase generation could perhaps be client side ?
mount -t nfs $IP/$NFS_PATH $LOCAL_PATHработать отказывался, выдавая
Operation not permitted
Use a reserved socket port number. This is useful for mounting servers that require clients to use a reserved port number on the mistaken belief that this makes NFS more secure. (For the rare case where the client has a trusted root account but untrustworthy users and the network cables are in secure areas this does help, but for normal desktop clients this does not apply.)