All we have to do is get all certs flagged with must-staple and have all webservers handle stapling, and we're set!

(Sarcasm? Moi?)