pam_exec

A pam_exec hook on open_session turns each successful SSH login into a push notification

The mechanism is sound, and the adoption bill is only two files plus one line of PAM config. The catch is a script that makes a synchronous call to ifconfig.me on every login, so every successful login now waits on that lookup before any alert goes out.