* jenkins needs a different security group than the webserver has
* admins should have separate accounts for their admin and dev hats
* jenkins needs an m1.small AWS instance because it's java-based
* add dev authorizations for james and fog