production best-practices for cn=monitor