The thing about keybox is that it's nice and fast to get better. For someone that doesn't have an ops team, or even an ops person, it is a neat solution.

Yes you need to be careful with it, I ran it on an internal VM, with only 2 users who had access to the admin console.

I'd love to see something as simple to use as keybox based around LDAP, I've had a google and can't see anything.