I thought this is what Salt is for? Combined with a more elaborate version of Qubes OS Helper, we could make this nice.