Also, I need a clear reboot policy for that box. When the auto-updates email me saying one needed a reboot (i.e. kernel), can I reboot? Best time to reboot? Does Adam need to be pre-informed in case it doesn't come back up? etc.
If it's safe, I'd like to have the authority to reboot in the wee hours (like 3am) whenever the box reports a kernel sec update. Right now we're running on a kernel that is about 3 sec updates old, uptime of several months.