should we have 2 admin servers as the default? (for failover)