We need to have a salt master in codfw for redundancy if for no other reason. Our tools are all set up to rely on having one salt master. We need a script that accepts keys or deletes them on both masters, at a minimum. There is probably code work needed for the minion to behave properly at connection time if one master is down, as well (retrying at periodic internals. for example). What else? Need to get a list together.