[heroes] Counter(ish) Proposal: FreeIPA on openSUSE + Ipsilon for SSO