Re: Building production machines out-of-place, regenerating certs when a machine's identity changes, etc.