The Console already talks to the agent on the proxy servers, so why not be able to upgrade the nginx plus version to a new patch or version, especially to quickly address a security issue. The Console could use the Config Sync Groups to apply a fix in parallel when an updated version of NGINX Plus is released.