&gt; gpg --verify &lt;(curl https://hashbang.sh)

  The safest method of running a script from a source you don't trust is to:

  Download and verify integrity with GnuPG
  &gt; gpg --recv-keys 0xD2C4C74D8FAA96F5
  &gt; curl https://hashbang.sh | gpg -o http://hashbang.sh

  Note that piping to sh there is dangerous:
  you do not know, before gpg returns,
  whether the signature is valid.

  Inspect source code
  &gt; less http://hashbang.sh

  Run
  &gt; chmod +x http://hashbang.sh
  &gt; ./hashbang.sh

  As an advanced alternative you can bypass using this script and hit our user
  provisioning API directly with an SSH Public Key and desired username:

  &gt; curl https://hashbang.sh/server/stats
  { "http://server.hashbang.sh": { infos ...}, ... }
  &gt; curl -d '{"user":"someuser","key":"'"$(cat ~/.ssh/id_rsa.pub)"'","host":"http://someHost.hashbang.sh"}' -H 'Content-Type: application/json' https://hashbang.sh/user/create
