Still need to drop the hardcoded allowed set.
Just prepares the servers, all management is then done through cephadm.