Another thing is using Google's free authentication services to add two-factor authentication. It's very simple to set up via PAM.