from Colin Percival empire we present “spiped”:
https://github.com/Tarsnap/spiped
https://www.daemonology.net/blog/2012-08-30-protecting-sshd-using-spiped.html
https://www.daemonology.net/blog/2011-07-04-spiped-secure-pipe-daemon.html
yes, it’s true and it’s not black magic…if you understand the simple technology behind…and yes it’s a magic bullet
enjoy
the one you don’t use it