IMPORTANT: Daemons MUST be stopped before we deploy `db` this week because of T12987. We probably need to write `bin/remote restart --stop` before we can do this, since this isn't normally something we do.
- Decide the fate of Elastic IP `54.67.93.87` (previously, `vault.phacility.com`).
- Probably a good time to sort out domains and SSL (T12917).
- Maybe finish T12608 (key cycling) but this needs a bit of additional work to fix the internal (`admin` -> `bastion`) use of keys.