Default Auto Failover to On

Right now auto failover is off by default. I have tickets on Github to toggle it on for our cloud templates, but perhaps we should just turn it on in the product be default.

The argument against turning it on is that auto failover makes our system eventually consistent. There's a concern that eventual consistency would violate the principle of least surprise.

On the other side of that, it's somewhat surprising when the database doesn't heal itself. I wonder how we're approaching this with Kubernetes.