We should split this up into subtasks by arch, but one thing that we should like is staging environments for our libvirt IPI based dev environments. This would mean that we could test security patch/env configuration updates in an isolated environment without bringing down the live development environments.