You need to ensure that objects disconnected by using provisioning rules are not re-evaluated for joinand projection rules on subsequent runs
You need to ensure that help desk users can manage users that are locked out of the Password Reset feature