>Like moving/removing their ssh keys

/root/.ssh/authorized_keys

>installing your own kernel

option during installation. You can also configure your own ssh key and set a post-install script under the expert check box.

>turning off their monitoring ping so they don't reboot your server if you are doing something that blocks the ping for too long

option in the control panel