Is there a best practice for configuring a secondary ovirt engine to take over in case of engine failure?