Comment by mywittyname

> but not implementing anti-tampering on local and remote backups i.e. protection from root.

How do you accomplish this? I have some ideas/assumptions, but I'd like to hear more about the best practices here.