SSH authentication and authorization. Everything is done via pubkeys. We have an ACL system for interacting with PRs and plan to expand it.