Threat shield, user password page, improved SSH policy and restore without network

[danb35 (Dan)]

@giacomo

You can now expose a page for password change to port 443 (HTTPS), and keep port 9090 (Cockpit) private!

That would seem to make my module redundant, but it’s definitely a good change. Even if I think the page appearance is nicer on mine…