Hi! Please see the following ticket about an issue I discovered with the authentication secret of a devpi-server and it's replicas. So far this didn't matter, but there are certain scenarios and plugin ideas where it will be a problem. Anyone deploying replicas and cares about security (hopefully everyone) is welcome to help come up with a solution. https://github.com/devpi/devpi/issues/637 Regards, Florian Schulze