Our current system will already check when you login you have valid access by connecting to GitHub.
This will mean that shell access will only require addition to GitHub and the actual group in Puppet.
We will no longer require waiting for users to issue new SSH keys.
It'll also mean you don't have to remember an SSH password. Your GitHub one will be the only one you need.
We need to rename some users though to match up with their email.