it may be difficult logistically if your application server needs direct, automated SSH access to all of your hosts