I look for good practices for deploying with capistrano.

I would like to start out with a short description how I used to do deployment.

capistrano is installed locally on a developer's computer. I deploy thought gateway with capistrano option :gateway. Firstly, I thought that with :gateway option I need to have ssh connection only to gateway host, but it turns out that I need ssh connection (public key) to all hosts where I want to deploy to.

I would like to find a convenient and secure way to deploy application.

For example, in case when new developer starts working, is much more convinient to put his *public_key* only on gateway server and not on all applications servers. On the other hand I don't want him to have any connection to servers in particular ssh to gateway, just because he is developer, he needs to do only deployments.

If you are aware of good practices for deploying with capistrano, please, let us know.