As far as I know, most of this complexity surrounds setting up the _client_ software, not the server bits (though that, considering availability and so on, is its own bucket of worms) -- you just don't get Any Random User to install Puppet or Chef and pull in a cookbook or recipe or I don't know what they're called and ... well, I guess you get the point.