/hbin/edit-dns

the script calls the dns zone include file in an editor and restarts bind if the file has changed

remote root login diabled

from now on.

now, here is an interesting option in the sshd_config:
#PermitRootLogin without-password
;)