Review Security Landscape

I'm playing a bit fast and loose IMO to get this up and running. From what I can tell, I'm doing pretty well. However, it would be great to do a good review of the following:
## Public Key Infrastructure
- Should the CA for the auth store be independent of the CA for communicating amongst Docker nodes?
- Should each deployment be a wholly separate entity with a new CA?
## ObjectRocket (or other programmatic Database access)
- In the same spirit of total annihilation, we could be creating access to the main mongo database programmatically with a new user for every deployment.

Side Ansible question - are the values of variables rendered locally or on the host being deployed to?

Clearly flying has made me crazy.

No se especifican archivos, pruebas ni puntos de entrada. Empieza investigando las cuestiones relativas a la separación de PKI y a una CA por despliegue, y después revisa el acceso programático a MongoDB y cómo Ansible representa las variables. Se considera terminado cuando las decisiones de seguridad y el enfoque de despliegue recomendado estén documentados.

Escrito por el modelo de indexación a partir del texto del issue.