We all have a lot of internal services that need encryption and authentication to be provided by some sort of PKI.
Do the security gains of using a different private/public key pair for each service justify the extra work entailed?
Or is using a single key pair per server Good Enough?
For instance, all of my *nix servers have rsyslog, Bacula, and Puppet running on them. Does using a common, server-specific key pair across all three services open up an attack vector I'm overlooking?