I've been putting together a backup strategy utilizing backupninja, rdiff-backup, and ssh keys. I was hopeful that the "restrict-update-only" rdiff-backup option could be used to create an rdiff-backup server that could be used only for adding increments and prevent the removal of increments. Unfortunately that seems to not be the case and I'm forced to switch to a pull strategy which is far more complicated. I'm quite disappointed.