Thanks everyone for the remarks and suggestions.

We tried the 3.6-vintage VM suggestion
(attractive, since it meant minimal change to the world.)
That held up for 3 days before the next spin-out.
(Hard to say if that's an improvement,
or just a lull in checkin frequency,
but it hardly matters.)

HTTP (web-dav) it is.

-brad