Block a user
Ensure services are not relying on a single IPA server
Create VPN break glass accounts and documentation for if IPA is unreachable
VPN should not rely on a single IPA server