Best practises for config sync when making changes via icontrol

So this suggests making these changes on the active and syncing to standby at the end? As our rebuild procedure currently involves forcing down node members (which will one day including waiting for connections to drain) rebuilding and then reenabling, doing this sort of thing on the standby makes no sense at all...