Oh, and I heard a story once that at the BBC, any of the ops team can SSH to any host in the system... and as soon as they log out, the host is automatically wiped and rebuilt from scratch. So you can get in to diagnose and debug things, but nobody's tempted to build special-snowflake manually-configured systems.