By declaring the directory copy with recurse set to true, there is no longer a
need to manage every single individual file in the directory. This might
(almost certainly?) have consequences when files are removed from the
repository, but that's not really a concern in this specific scenario.
Implement "jeff" account with password and allow SSH access. This account is
password protected, requiring a change to the SSH config file to allow
passwords. Note that when possible, passwords should NOT be permitted for SSH
access.
Security through obscurity is generally questionable, but changing to a
non-default port does reduce automated scans substantially. However, moving to
a port outside of the privelaged scope (above 1024) may have other consequences.