Making a system highly available isn't just about adding redundancy