# enrol-broker PKI material (CA root, provisioner password, admin mTLS certs). # Mounted read-only at /pki. Keep the dir, never commit its contents. * !.gitignore