Right now there is no service discovery, no central authentication or authorization. This means:

• There are at least 13 user/password combos that are used by the test automation to perform anything. Also since they are not stored in a central place adding uses is a very error prone and hard task.
• There is no way to find where a service is. We sort of solved this with hard coded IPs on a private network but this is not scale-able, resilient or easy to find info.
• Authorization is also totally decentralized