TODO
====

  * restrict access/permission to /etc/bfh/bfh.conf.d/ssp.conf
  * unset password debconf variable?
  * mark all debconf fields as unseen?
