a. Ask for a root password before spinning up the machine.

b. Ask for a public key before spinning up the machine.