can you talk about the architecture choice to use a daemon and client? presumably the daemon actively syncing state? presumably the daemon holds keys? is there auth on the socket beyond unix file permissions or can anyone talk to it?

Just installed. Is there a group I should join?