Honestly, you can't just go trying to fix bugs by inserting random sleeps and memory barriers. That will never work. ...well, almost never.
The chance that I put the mb() in the right place the first time is basically zero, and yet here we are.
ssh+2FA to all your machines, anywhere, without opening firewall ports.