Right. The devs have full sudo access. They can install and configure whatever they want. Our Bento tool has pre/post setup hooks for all services. So teams can automate this. When something is commonly used we just preinstall it for them. Or some just contribute to the repo. It is all fairly straight forward Ansible and shell scripts. We push nightly to everyone's existing machines.