# NTS-KE server cert/key (fleet-signed, per-environment) — issued by ../nts-cert.sh.
# Never commit key material or environment CA-signed certs (see CLAUDE.md invariant).
nts.crt
nts.key