Plans

 -- VMs for researchers

 -- replace some of those badly-managed sub-desk servers...

 -- own data-centre VLAN
     -- walled off from other d-c VLANs via default-deny ACLs...

 -- some already
     -- e.g., atmos example (RQ, Met Office)