move critical services off, and then replace, moly
As part of #29817 (moved), we found out that
moly.torproject.org has vastly surpassed its shelf life, having been installed in 2011. It's a big machine with multiple KVM guests, so we can't simply retire it and redistribute its guests elsewhere, at least not without filling up the rest of the infrastructure.
So we probably need to find a replacement box for moly.