rundeck drained+rebooted one production server (afs250), now draining the second. Took several restarts of the job, procedure is (intentionally) fragile; got one false alarm from "monitor" ("AFS prob").
all scripts shipped via puppet (properly tracked, but slow to edit)
new upstream 1.6.21 (http://openafs.org/dl/openafs/1.6.21/RELNOTES-1.6.21) not yet on CentOS build server, will wait (1.6.21.1 was built from their SRPM). Contains a fix for "100ms transmit delays" seen in certain RX states (this might explain the much increased latency when probing from outside of the fileserver...).
1 dead disk on afs501 (Wigner), hardware repair team asked for 2 more "sudo" commands (done).