Do we include vendors?
No objections in general expressed so far, so barring someone speaking up now, we'll include them under groundrules proposed for now
Current vendors that applied: Duo Security, LastPass, Yubico.
Are there others we want to recruit?
Do we record meetings?
No objections in general expressed so far, so barring someone speaking up now, we'll record as general practice for now.