One shared passphrase, so actions are not attributed to a person. Keep this behind your own network controls as well.