i appreciate you taking the time to reply, thanks.<p>some additional questions though:<p>1. are security groups opaque within convox or are they exposed to developers?<p>2. when you say monitoring tools are built in and you have tools for logging does this lock me in to the convox log pipeline and monitoring? what i want to use sensu on my instances? do i have to add sensu to every container? if you run, for instance, five containers per vm do i pay the overhead of five seperate sensu instances? same question for something like logstash?<p>3. you mention vpc. aws has proven stingy with vpc service limit requests in the past. i have trouble getting them to grant more than low double digits per region&#x2F;account. can i run multiple convox racks per vpc or is the one vpc per rack a hard requirement?