@dk @clayton … does work, and does scale.
I find it irritating that people don't do this and instead just claim that other people should bend to their whims, that other people should run *their* systems *differently* instead of just building a different solution and showing that this different solution actually works better. I'd be very curious if someone did that, all solutions in that direction I have seen so far have, for some reason, dropped the security level, though.