It may be possible to avoid including the monit binary in the git repo:
- if the wheezy-backports version of monit (5.6) is recent enough for what we want
- by downloading the precompiled binary from the official website
- by downloading and compiling the source on the managed host, as it seems Monit's only notable dependancy is openssl