follow-on questions:<p>- is it now possible to write a script that generates network diagrams, etc., that are sufficient for PCI-DSS Level 1?<p>- is the rest of Heroku&#x27;s datacenter process documented so that it can be given to a QSA?<p>- Would it now be possible for companies like Aptible to sell their core competency&#x2F;service as a Heroku add-on?<p>- Can add-ons be launched inside a private space?<p>- Can access to Heroku, git deploys, etc., add-ons be 100% protected by multi factor authentication?