Some good ideas above. It will actually be on a network with other devices/servers, just not with me in front of it. So perhaps a network boot of a clean image would work, and I like the dual redundant image idea. Its a Pi3B, I'll read more on the boot modes.
Thanks again all.