> That requires running OS software that accepts remote policy management

Every Linux system that supports SSH potentially "accepts" remote management! The challenge is just putting it into a framework.

The gaps: Pull VS Push, Imperative vs Declarative and Discovery being hard.