Chef configuration. Managed with librarian, modular for machine centric keys/certs.