MBS-799/MBS-5919: split out FKs into their own script so we don't get them on slaves