grim/hgkeeper

Pass the AdminRepo into the policy template so that will work automatically as well
repos/
host-keys/