+ ditching fabric (all this setup gets done by ansible externally now)
+ adding in LDAP auth
+ PCN