[Handle-info] about setup mirror server

We have a primary server ("handle-1") living at IP 144.92.161.72,
ports 2641 (tcp, udp) and 2652 (http), serving the 0.NA/1711 naming
authority. I want to replicate and failover to a mirror server
("handle-2") living at IP 144.92.161.73 (same port assignments as the
primary).

From looking primarily at Section 10 ("Replication") in the
Administration Manual, and various other bits and pieces, it looks
like some things have to happen:

(a) setup the mirror server and get replication authentication
established. To do this, run the "Simple Setup" as detailed in the
INSTALL file. Answer "n" to the "Will this be a primary server?"
question, then enter the IP and port number of the primary server
when prompted (i.e. for us, 144.92.161.72:2641). The setup program
prompts for a server key (which we don't encrypt, since we have to do
unattended restarts), skips prompting for an administrative key (only
relevant for primary servers), and the prompts for a "replication
authentication" key.

-> question #1: If I choose to encrypt the replication
     authentication key, will I need to enter the password at server
     startup, or otherwise periodically? I.e. is it more like the
     server key, or more like the administrative key?

The program finishes by telling you to email the sitebndl.zip file to
CNRI. They use it to update the HS_SITE information in the 0.NA
handle, I'm guessing (see below).

Then you have to modify the config.dct file in various ways. The
instructions in the Admin Manual seem a little vague to me. You need
to modify "server_admins" ...

-> question #2: What value do I put there? The same as in the
     primary, i.e. for us "300:0.NA/1711"?

and "this_server_id" ...

-> question #3: The manual says that you must modify this "if more
     than 1 server in HS_SITE". Does a mirror server, running on a
     seperate host at a seperate IP, wind up as another entry in a
     single HS_SITE record, or as a seperate HS_SITE record entirely?
     Do I need to change this number so that it's different from the
     primary?

and "replication_authentication" ...

-> question #4: What goes here? The manual doesn't say. The setup
     program, for me, filled in "privatekey:300:0.NA/1711". Is this
     correct?

Then, the manual says you have to modify the config.dct for the
primary server. These directions are even less clear to me:

-> question #5: I'm supposed to "Add the replication public key
     value(`replpub.bin') to the handle specified in
     replication_authentication.". My primary doesn't have any
     value set for "replication_authentication". And do I need to
     copy "replpub.bin" over to the primary server directory?

-> question #6: Then I need to "Add that handle to the primary
     server's replication_admins group in its `config.dct' file."
     What handle is "that handle"?

-> question #7: There's a step that needs to be done "ONLY if
     mirror servers are under the same HS_SITE". Same question as
     #3 above; also, the proceeding line in the manual states that
     "The `txnsrcsv.bin' file is the `siteinfo.bin' file from the
     primary server." Does that mean I have to copy the primary's
     "siteinfo.bin" into place under the mirror as "txnsrcsv.bin"?