sudo, ssh certs, egress firewalling. Congrats - you've covered about 4 pages from the NSA's 200 page hardening benchmark. Off to a good start!
http://www.nsa.gov/ia/mitigation_guidance/security_configura...
http://www.nsa.gov/ia/mitigation_guidance/security_configura...