add deployment constraints

[anners]

it would be nice to highlight config validator with the PCI terraform

[jmound]

Closing, as discussed.