One zone, one fate

See why several machines in one failure domain do not provide zone resilience.