/fleet-manager *.test # deployment secrets + issued PKI (never commit) .env /pki/ /data/