diff --git a/bootstrap-all.sh b/bootstrap-all.sh
index f272a28..6e2de70 100644
--- a/bootstrap-all.sh
+++ b/bootstrap-all.sh
@@ -41,13 +41,10 @@ echo "### Ubuntu (localuser + sudo) ###"
 echo
 run_with_sudo tsys-siem 100.72.35.113 localuser
 run_with_sudo sectestbed-cloudron 100.97.140.105 localuser
-
-# === Debian: localuser + sudo (kali — su broken, use sudo) ===
-echo "### Kali (localuser + sudo) ###"
-echo
 run_with_sudo kali-tsys 100.82.30.115 localuser
+run_with_sudo pfvsvrpi 100.91.151.113 localuser
 
-# === Debian: subodev + su ===
+# === Debian: subodev + su (root password reset) ===
 echo "### Debian: subodev + su ###"
 echo
 run_with_su subopi3 100.93.17.77 subodev
@@ -69,4 +66,3 @@ echo "========================================"
 echo "2FA by design (leave alone):"
 echo "  sectestbed-sandbox"
 echo "========================================"
-echo "Note: pfvsvrpi accessible via different key (Blink/iPad) — agent key not yet pushed"