diff --git a/bootstrap-all.sh b/bootstrap-all.sh
index c1f8f86..f272a28 100644
--- a/bootstrap-all.sh
+++ b/bootstrap-all.sh
@@ -39,10 +39,13 @@ run_with_su() {
 # === Ubuntu: localuser + sudo ===
 echo "### Ubuntu (localuser + sudo) ###"
 echo
-run_with_sudo pfv-jetson-nano-1 100.82.230.119 localuser
-run_with_sudo preprod-hfnoc-uisp 100.77.14.7 localuser
-run_with_sudo sectestbed-cloudron 100.97.140.105 localuser
 run_with_sudo tsys-siem 100.72.35.113 localuser
+run_with_sudo sectestbed-cloudron 100.97.140.105 localuser
+
+# === Debian: localuser + sudo (kali — su broken, use sudo) ===
+echo "### Kali (localuser + sudo) ###"
+echo
+run_with_sudo kali-tsys 100.82.30.115 localuser
 
 # === Debian: subodev + su ===
 echo "### Debian: subodev + su ###"
@@ -51,11 +54,9 @@ run_with_su subopi3 100.93.17.77 subodev
 run_with_su subopi-dev-3 100.64.231.65 subodev
 run_with_su subopi-dev-4 100.65.224.85 subodev
 
-# === Debian: localuser + su ===
-echo "### Debian: localuser + su ###"
+# === Debian: ultixfield + su ===
+echo "### Debian: ultixfield + su ###"
 echo
-run_with_su kali-tsys 100.82.30.115 localuser
-run_with_su pfvsvrpi 100.91.151.113 localuser
 run_with_su ultix-field 100.115.233.124 ultixfield
 
 echo "========================================"
@@ -68,3 +69,4 @@ echo "========================================"
 echo "2FA by design (leave alone):"
 echo "  sectestbed-sandbox"
 echo "========================================"
+echo "Note: pfvsvrpi accessible via different key (Blink/iPad) — agent key not yet pushed"