Embed Notice

@ntnsndr I took option 2 to mean something like: things of greater consequence could be formally signed off by more people, like defederating from a big instance, doing a system upgrade, appointing new admins/mods, etc. (Routine mod actions could still be done solo)

Sure, as long as there is a single server, rogue sysadmin still a threat - but it does not happen often. Let's push sysadmin further toward "titular" power. (i.e. option 2 can be DAO-less)