+ * Bump Debian Standards-Version to 3.9.8.0
+ * Fix up systemd control file to allow non-socket activation.
+ * Update Vcs URLs to use secure variants.
+ * Add onak to Provides: in init script rather than just pgp-keyserver.
+ * Add all hardening options (in particular for bindnow + pie).