maybe I've missed but also it's important to protect etcd with TLS, firewall