Untitled

Every time I get a dev or executive sending me a Slack message saying "can you reset my password" or "can your provision me in...", my very next reply is "please send me your public key".

They do not get their credentials until they do so. And once they do, our security posture gets better and better.