Great point from David McKay at #DevOpsNotts - not having SSH access to a Production system is hugely important for investing in logging/traceability. That was something I didn't really "get" until I was having to support things and realising I couldn't diagnose it as easily (although the key reason for us not having access is to ensure we can't be near customer production data)