Database Deployments with Automatic Rollbacks, part I: Where We Are, and Where We Want to Be