A re-run's apply writes the bundle's one-entry user list over the list placed at enrolment, and an enrolled machine skipped placing it: enrolled was taken for adopted, against ADR 0331 §5. Until the controller knows the nats module, the installer places the composed list again. Also drop the previous broker's AMQP and management ports, which nothing raises any more, and say why the bus always carries a ports setting.