Bender 42 minutes ago

NFSv4 + OpenLDAP + Kerberos would be the correct answer in this particular case based on OP's concerns. Not right for everyone, just them and just in this case. This assumes all devices are managed. For others it may be a complexity trap.