Oh, the daemons thing is sort of somewhat-lies since you need to do the whole authorized key dance for new hosts. I'll flesh that out later, though; all these documents have appropriate caveats already.