with the parallel CF execution, need to add more DependsOn tags to make sure the things like NAT are in place before we try to update a host.
diagram and cleanup this helpful 3 tier with test host pattern.