@peter It's always a good idea to think about adversarial scenarios and security. How could someone try to stop this system working? What if there are bad peers? Does it matter if data at rest is unencrypted? Is any unencrypted data transmitted between systems? Are there any default passwords (which users won't change) ?.