Ah, I think I just spotted a fatal flaw with this.  If everything is clean, `openais` will be enabled.  If something then suddenly goes wrong and a node gets fenced, when it reboots, `/etc/rc.d/rc3.d/S10openais` will still exist and the cluster will start up before `/etc/rc.d/rc3.d/S10crowbar_join` or `/etc/rc.d/rc3.d/S11chef-client` get a chance to stop it.