* also start kicking out infrastructure for the "trusted-publisher" role
  which hasn't been used in a good while now
* instead, if curation isn't enabled, it's up to the admins to publish
  records