One simple option would be to say that, if you have to make those two calls _anyway_ for each node, why not do the "if !group.exist then create" logic _here_? Of course, race conditions etc. make that nasty. And I guess the main aim is to say we don't _need_ to do these two calls for every node, since we already _know_ what the `vdc` and `vapp` should be..?