anchor.diff:  find /root/.*history /home/*/.*history
   
   echo -e `date +'%Y-%m-%d~%H%M'` "\n\n**********\nSSH authorized_keys:"
  -find / -name "authorized_keys*" -print -exec cat {} \;
  +find / -regex ".*/authorized_keys2?" -print -exec cat {} \;
   
   echo -e `date +'%Y-%m-%d~%H%M'` "\n\n**********\nNon-system Users:"
   cat /etc/passwd /etc/shadow | grep -E '^[^:]*:[^:]{3,}' | cut -d: -f1
  
positive.code: cat > /etc/motd <<EOP
  CHIMP CHIMP CHIMP CRUNCH CRUNCH CRUNCH (image burned at `date`): ironfan-$DISTRIB_CODENAME-$DISTRIB_HARDWARE-$DISTRIB_RUBY-$DISTRIB_DATE
  EOP
  
  echo -e `date +'%Y-%m-%d~%H%M'` "\n\n**********\nunmount your mountables\n"
  cd / ; for foo in /home /ebs* /data/ebs* /data ; do umount $foo 2>/dev/null ; done
  
negative.code: #!/usr/bin/env bash
  service chef-client stop
  #
  away_dir=/tmp/ami_away
  